← Database

CVE-2010-2197

MEDIUM CVSS: 5.8 Published: 2010-06-08 Modified: 2026-06-16

Description

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.

Affected Platforms

Rpm Rpm

Weakness Type

CWE-264

References