Summary
| Detail | |||
|---|---|---|---|
| Vendor | Redhat | First view | 2012-07-03 |
| Product | Automatic Bug Reporting Tool | Last view | 2018-05-01 |
| Version | 2.0.4.981 | Type | Application |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:redhat:automatic_bug_reporting_tool | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 3.3 | 2018-05-01 | CVE-2013-4209 | Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. |
| 4.7 | 2017-06-26 | CVE-2015-3142 | The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application. |
| 5.5 | 2017-06-26 | CVE-2015-1870 | The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors. |
| 6.9 | 2015-12-07 | CVE-2015-5287 | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump. |
| 3.6 | 2015-12-07 | CVE-2015-5273 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. |
| 6.9 | 2013-03-12 | CVE-2012-5660 | abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes." |
| 3.7 | 2013-03-12 | CVE-2012-5659 | Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module. |
| 1.9 | 2012-07-03 | CVE-2012-1106 | The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information. |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 37% (3) | CWE-200 | Information Exposure |
| 25% (2) | CWE-264 | Permissions, Privileges, and Access Controls |
| 25% (2) | CWE-59 | Improper Link Resolution Before File Access ('Link Following') |
| 12% (1) | CWE-362 | Race Condition |
SAINT Exploits
| Description | Link |
|---|---|
| ABRT/sosreport privilege elevation | More info here |
OpenVAS Exploits
| id | Description |
|---|---|
| 2012-07-30 | Name : CentOS Update for abrt CESA-2012:0841 centos6 File : nvt/gb_CESA-2012_0841_abrt_centos6.nasl |
| 2012-06-22 | Name : RedHat Update for abrt, libreport, btparser, and python-meh RHSA-2012:0841-04 File : nvt/gb_RHSA-2012_0841-04_abrt_libreport_btparser_and_python-meh.nasl |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2016-03-04 | Name: The remote Fedora host is missing a security update. File: fedora_2015-79c1758468.nasl - Type: ACT_GATHER_INFO |
| 2015-12-22 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20151123_abrt_and_libreport_on_SL7_x.nasl - Type: ACT_GATHER_INFO |
| 2015-12-02 | Name: The remote CentOS host is missing one or more security updates. File: centos_RHSA-2015-2505.nasl - Type: ACT_GATHER_INFO |
| 2015-11-30 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2015-2505.nasl - Type: ACT_GATHER_INFO |
| 2015-11-24 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2015-2505.nasl - Type: ACT_GATHER_INFO |
| 2015-07-08 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20150707_abrt_on_SL6_x.nasl - Type: ACT_GATHER_INFO |
| 2015-07-08 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2015-1210.nasl - Type: ACT_GATHER_INFO |
| 2015-07-08 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2015-1210.nasl - Type: ACT_GATHER_INFO |
| 2015-07-01 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2015-10193.nasl - Type: ACT_GATHER_INFO |
| 2015-06-22 | Name: The remote Fedora host is missing one or more security updates. File: fedora_2015-9886.nasl - Type: ACT_GATHER_INFO |
| 2015-06-16 | Name: The remote CentOS host is missing one or more security updates. File: centos_RHSA-2015-1083.nasl - Type: ACT_GATHER_INFO |
| 2015-06-11 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20150609_abrt_on_SL7_x.nasl - Type: ACT_GATHER_INFO |
| 2015-06-10 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2015-1083.nasl - Type: ACT_GATHER_INFO |
| 2015-06-10 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2015-1083.nasl - Type: ACT_GATHER_INFO |
| 2013-07-12 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2013-0215.nasl - Type: ACT_GATHER_INFO |
| 2013-07-12 | Name: The remote Oracle Linux host is missing one or more security updates. File: oraclelinux_ELSA-2012-0841.nasl - Type: ACT_GATHER_INFO |
| 2013-02-04 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20130131_abrt_and_libreport_on_SL6_x.nasl - Type: ACT_GATHER_INFO |
| 2013-02-01 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2013-0215.nasl - Type: ACT_GATHER_INFO |
| 2013-02-01 | Name: The remote CentOS host is missing one or more security updates. File: centos_RHSA-2013-0215.nasl - Type: ACT_GATHER_INFO |
| 2012-08-01 | Name: The remote Scientific Linux host is missing one or more security updates. File: sl_20120620_abrt__libreport__btparser__and_python_meh_on_SL6_x.nasl - Type: ACT_GATHER_INFO |
| 2012-07-11 | Name: The remote CentOS host is missing one or more security updates. File: centos_RHSA-2012-0841.nasl - Type: ACT_GATHER_INFO |
| 2012-06-20 | Name: The remote Red Hat host is missing one or more security updates. File: redhat-RHSA-2012-0841.nasl - Type: ACT_GATHER_INFO |
