Redhat Automatic Bug Reporting Tool (ABRT) 2.0.3

CPE Details

Redhat Automatic Bug Reporting Tool (ABRT) 2.0.3
redhat
automatic_bug_reporting_tool
2.0.3
2013-03-19
11h46 +00:00
2013-03-20
12h09 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.3:*:*:*:*:*:*:*

Informations

Vendor

redhat

Product

automatic_bug_reporting_tool

Version

2.0.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2013-4209 2018-05-01 17h00 +00:00 Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.
3.3
Low
CVE-2015-1870 2017-06-26 13h00 +00:00 The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.
5.5
Medium
CVE-2015-3142 2017-06-26 13h00 +00:00 The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application.
4.7
Medium
CVE-2015-5273 2015-12-07 17h00 +00:00 The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
3.6
CVE-2015-5287 2015-12-07 17h00 +00:00 The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
6.9
CVE-2012-5659 2013-03-12 22h00 +00:00 Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.
3.7
CVE-2012-5660 2013-03-12 22h00 +00:00 abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
6.9
CVE-2012-1106 2012-07-03 14h00 +00:00 The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
1.9