CVE-2008-3187

zypp-refresh-patches in zypper in SUSE openSUSE 10.2, 10.3, and 11.0 does not ask the user before accepting repository keys, which allows remote repositories to cause a denial of service (package data corruption) via a spoofed key.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:opensuse:zypper:10.2:*:*:*:*:*:*:*
cpe:2.3:a:opensuse:zypper:10.3:*:*:*:*:*:*:*
cpe:2.3:a:opensuse:zypper:11.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:48

Type Values Removed Values Added
References () http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html - () http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00006.html -
References () http://secunia.com/advisories/31167 - () http://secunia.com/advisories/31167 -
References () http://www.securityfocus.com/bid/30293 - () http://www.securityfocus.com/bid/30293 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/43922 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/43922 -

Information

Published : 2008-07-21 16:41

Updated : 2024-11-21 00:48


NVD link : CVE-2008-3187

Mitre link : CVE-2008-3187

CVE.ORG link : CVE-2008-3187


JSON object : View

Products Affected

opensuse

  • zypper
CWE
CWE-20

Improper Input Validation