VULNERABILITY INTELLIGENCE
CVE-2006-5466
CVSS score5.4 MEDIUM
EPSS probability3.87%
CISA KEVNot currently listed
Published2006-11-06
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:N/I:N/A:C
Description
Heap-based buffer overflow in the showQueryPackage function in librpm in RPM Package Manager 4.4.8, when the LANG environment variable is set to ru_RU.UTF-8, might allow user-assisted attackers to execute arbitrary code via crafted RPM packages.
Primary references
- secalert@redhat.com — Exploit, Vendor Advisory
- secalert@redhat.com — Patch, Vendor Advisory
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com
- secalert@redhat.com — Patch
- secalert@redhat.com
- secalert@redhat.com — Exploit
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory