CVE-2010-2197

Published: Jun 8, 2010Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.

Affected (93)

Products: Rpm: Rpm

Rpm

1 product

Rpm

Configuration A

87 vulnerable

Vulnerable Software	Affected Versions
Rpm Rpm	Version 1.2
Rpm Rpm	Version 1.3.1
Rpm Rpm	Version 1.3
Rpm Rpm	Version 1.4.2
Rpm Rpm	Version 1.4.2/a
Rpm Rpm	Version 1.4.3
Rpm Rpm	Version 1.4.4
Rpm Rpm	Version 1.4.5
Rpm Rpm	Version 1.4.6
Rpm Rpm	Version 1.4.7
Rpm Rpm	Version 1.4
Rpm Rpm	Version 2..4.10
Rpm Rpm	Version 2.0.10
Rpm Rpm	Version 2.0.11
Rpm Rpm	Version 2.0.1
Rpm Rpm	Version 2.0.2
Rpm Rpm	Version 2.0.3
Rpm Rpm	Version 2.0.4
Rpm Rpm	Version 2.0.5
Rpm Rpm	Version 2.0.6
Rpm Rpm	Version 2.0.7
Rpm Rpm	Version 2.0.8
Rpm Rpm	Version 2.0.9
Rpm Rpm	Version 2.0
Rpm Rpm	Version 2.1.1
Rpm Rpm	Version 2.1.2
Rpm Rpm	Version 2.1
Rpm Rpm	Version 2.2.10
Rpm Rpm	Version 2.2.11
Rpm Rpm	Version 2.2.1
Rpm Rpm	Version 2.2.2
Rpm Rpm	Version 2.2.3.10
Rpm Rpm	Version 2.2.3.11
Rpm Rpm	Version 2.2.3
Rpm Rpm	Version 2.2.4
Rpm Rpm	Version 2.2.5
Rpm Rpm	Version 2.2.6
Rpm Rpm	Version 2.2.7
Rpm Rpm	Version 2.2.8
Rpm Rpm	Version 2.2.9
Rpm Rpm	Version 2.2
Rpm Rpm	Version 2.3.1
Rpm Rpm	Version 2.3.2
Rpm Rpm	Version 2.3.3
Rpm Rpm	Version 2.3.4
Rpm Rpm	Version 2.3.5
Rpm Rpm	Version 2.3.6
Rpm Rpm	Version 2.3.7
Rpm Rpm	Version 2.3.8
Rpm Rpm	Version 2.3.9
Rpm Rpm	Version 2.3
Rpm Rpm	Version 2.4.11
Rpm Rpm	Version 2.4.12
Rpm Rpm	Version 2.4.1
Rpm Rpm	Version 2.4.2
Rpm Rpm	Version 2.4.3
Rpm Rpm	Version 2.4.4
Rpm Rpm	Version 2.4.5
Rpm Rpm	Version 2.4.6
Rpm Rpm	Version 2.4.8
Rpm Rpm	Version 2.4.9
Rpm Rpm	Version 2.5.1
Rpm Rpm	Version 2.5.2
Rpm Rpm	Version 2.5.3
Rpm Rpm	Version 2.5.4
Rpm Rpm	Version 2.5.5
Rpm Rpm	Version 2.5.6
Rpm Rpm	Version 2.5
Rpm Rpm	Version 2.6.7
Rpm Rpm	Version 3.0.1
Rpm Rpm	Version 3.0.2
Rpm Rpm	Version 3.0.3
Rpm Rpm	Version 3.0.4
Rpm Rpm	Version 3.0.5
Rpm Rpm	Version 3.0.6
Rpm Rpm	Version 3.0
Rpm Rpm	Version 4.0.1
Rpm Rpm	Version 4.0.2
Rpm Rpm	Version 4.0.3
Rpm Rpm	Version 4.0.4
Rpm Rpm	Version 4.0.
Rpm Rpm	Version 4.1
Rpm Rpm	Version 4.3.3
Rpm Rpm	Version 4.4.2.1
Rpm Rpm	Version 4.4.2.2
Rpm Rpm	Version 4.4.2.3
Rpm Rpm	Version 4.4.2

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Rpm Rpm	Up to 4.8.0
Rpm Rpm	Version 4.6.0
Rpm Rpm	Version 4.6.1
Rpm Rpm	Version 4.7.0
Rpm Rpm	Version 4.7.1
Rpm Rpm	Version 4.7.2

Related CWEs

CWE-264

References (4)

https://bugzilla.redhat.com/show_bug.cgi?id=125517

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/59423

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=125517

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/59423

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.