CVE-2012-5659

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
3.7 UNKNOWN
LOCAL
HIGH
AV:L/AC:H/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 20%
VendorProductVersion
redhatautomatic_bug_reporting_tool
𝑥
≤ 2.0.9
redhatautomatic_bug_reporting_tool
2.0.0
redhatautomatic_bug_reporting_tool
2.0.1
redhatautomatic_bug_reporting_tool
2.0.2
redhatautomatic_bug_reporting_tool
2.0.3
redhatautomatic_bug_reporting_tool
2.0.4
redhatautomatic_bug_reporting_tool
2.0.4.980
redhatautomatic_bug_reporting_tool
2.0.4.981
redhatautomatic_bug_reporting_tool
2.0.5
redhatautomatic_bug_reporting_tool
2.0.6
redhatautomatic_bug_reporting_tool
2.0.7
redhatautomatic_bug_reporting_tool
2.0.8
𝑥
= Vulnerable software versions
References
http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d81b577953b96a282167c7eecd66bf111a4f
http://rhn.redhat.com/errata/RHSA-2013-0215.html
https://bugzilla.redhat.com/show_bug.cgi?id=854011
http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d81b577953b96a282167c7eecd66bf111a4f
http://rhn.redhat.com/errata/RHSA-2013-0215.html
https://bugzilla.redhat.com/show_bug.cgi?id=854011