- Description
- A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 1.2
- Impact score
- 2.9
- Exploitability score
- 1.9
- Vector string
- AV:L/AC:H/Au:N/C:N/I:P/A:N
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D323A6B7-2741-4F31-B0D6-5D6FB738A2A1"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACAAD334-2CA7-4B3B-BA25-302E7610BC2A"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E4853E92-5E0A-47B9-A343-D5BEE87D2C27"
},
{
"criteria": "cpe:2.3:o:mandrakesoft:mandrake_linux:7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3EC1FF5D-5EAB-44D5-B281-770547C70D68"
}
],
"operator": "OR"
}
]
}
]