CVE-2012-5660

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.9 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 6%
VendorProductVersion
redhatautomatic_bug_reporting_tool
𝑥
≤ 2.0.9
redhatautomatic_bug_reporting_tool
2.0.0
redhatautomatic_bug_reporting_tool
2.0.1
redhatautomatic_bug_reporting_tool
2.0.2
redhatautomatic_bug_reporting_tool
2.0.3
redhatautomatic_bug_reporting_tool
2.0.4
redhatautomatic_bug_reporting_tool
2.0.4.980
redhatautomatic_bug_reporting_tool
2.0.4.981
redhatautomatic_bug_reporting_tool
2.0.5
redhatautomatic_bug_reporting_tool
2.0.6
redhatautomatic_bug_reporting_tool
2.0.7
redhatautomatic_bug_reporting_tool
2.0.8
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://git.fedorahosted.org/cgit/libreport.git/commit/?id=3bbf961b1884dd32654dd39b360dd78ef294b10a
http://rhn.redhat.com/errata/RHSA-2013-0215.html
https://bugzilla.redhat.com/show_bug.cgi?id=887866
http://git.fedorahosted.org/cgit/libreport.git/commit/?id=3bbf961b1884dd32654dd39b360dd78ef294b10a
http://rhn.redhat.com/errata/RHSA-2013-0215.html
https://bugzilla.redhat.com/show_bug.cgi?id=887866