CVE-2012-5660
12.03.2013, 23:55
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | automatic_bug_reporting_tool | 𝑥 ≤ 2.0.9 |
| redhat | automatic_bug_reporting_tool | 2.0.0 |
| redhat | automatic_bug_reporting_tool | 2.0.1 |
| redhat | automatic_bug_reporting_tool | 2.0.2 |
| redhat | automatic_bug_reporting_tool | 2.0.3 |
| redhat | automatic_bug_reporting_tool | 2.0.4 |
| redhat | automatic_bug_reporting_tool | 2.0.4.980 |
| redhat | automatic_bug_reporting_tool | 2.0.4.981 |
| redhat | automatic_bug_reporting_tool | 2.0.5 |
| redhat | automatic_bug_reporting_tool | 2.0.6 |
| redhat | automatic_bug_reporting_tool | 2.0.7 |
| redhat | automatic_bug_reporting_tool | 2.0.8 |
𝑥
= Vulnerable software versions
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| abrt |
| ||
| abrt-addon-ccpp |
| ||
| abrt-addon-kerneloops |
| ||
| abrt-addon-python |
| ||
| abrt-addon-vmcore |
| ||
| abrt-cli |
| ||
| abrt-desktop |
| ||
| abrt-devel |
| ||
| abrt-gui |
| ||
| abrt-libs |
| ||
| abrt-tui |
| ||
| libreport |
| ||
| libreport-cli |
| ||
| libreport-devel |
| ||
| libreport-gtk |
| ||
| libreport-gtk-devel |
| ||
| libreport-newt |
| ||
| libreport-plugin-bugzilla |
| ||
| libreport-plugin-kerneloops |
| ||
| libreport-plugin-logger |
| ||
| libreport-plugin-mailx |
| ||
| libreport-plugin-reportuploader |
| ||
| libreport-plugin-rhtsupport |
| ||
| libreport-python |
|
Common Weakness Enumeration
References