CVE-2010-2197

rpmbuild in RPM 4.8.0 and earlier does not properly parse the syntax of spec files, which allows user-assisted remote attackers to remove home directories via vectors involving a ;~ (semicolon tilde) sequence in a Name tag.

• rpm rpm 1.2 • rpm rpm 1.3 • rpm rpm 1.3.1 • rpm rpm 1.4 • rpm rpm 1.4.2 • rpm rpm 1.4.2\/a • rpm rpm 1.4.3 • rpm rpm 1.4.4 • rpm rpm 1.4.5 • rpm rpm 1.4.6 • rpm rpm 1.4.7 • rpm rpm 2..4.10 • rpm rpm 2.0 • rpm rpm 2.0.1 • rpm rpm 2.0.2 • rpm rpm 2.0.3 • rpm rpm 2.0.4 • rpm rpm 2.0.5 • rpm rpm 2.0.6 • rpm rpm 2.0.7 • rpm rpm 2.0.8 • rpm rpm 2.0.9 • rpm rpm 2.0.10 • rpm rpm 2.0.11 • rpm rpm 2.1 • rpm rpm 2.1.1 • rpm rpm 2.1.2 • rpm rpm 2.2 • rpm rpm 2.2.1 • rpm rpm 2.2.2 • rpm rpm 2.2.3 • rpm rpm 2.2.3.10 • rpm rpm 2.2.3.11 • rpm rpm 2.2.4 • rpm rpm 2.2.5 • rpm rpm 2.2.6 • rpm rpm 2.2.7 • rpm rpm 2.2.8 • rpm rpm 2.2.9 • rpm rpm 2.2.10 • rpm rpm 2.2.11 • rpm rpm 2.3 • rpm rpm 2.3.1 • rpm rpm 2.3.2 • rpm rpm 2.3.3 • rpm rpm 2.3.4 • rpm rpm 2.3.5 • rpm rpm 2.3.6 • rpm rpm 2.3.7 • rpm rpm 2.3.8 • rpm rpm 2.3.9 • rpm rpm 2.4.1 • rpm rpm 2.4.2 • rpm rpm 2.4.3 • rpm rpm 2.4.4 • rpm rpm 2.4.5 • rpm rpm 2.4.6 • rpm rpm 2.4.8 • rpm rpm 2.4.9 • rpm rpm 2.4.11 … and 33 more