CVE-2003-0546

up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the…

published August 14, 2003

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the Red Hat Network, if that network is compromised.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.7th percentile
Published
2003-08-14T04:00Z
EPSS history
Timeline
  • 14 AUG 04:00Z
    up2date 3.0.7 and 3.1.23 does not properly verify RPM GPG signatures, which could allow remote attackers to cause unsigned packages to be installed from the…
    cvelistv5