CVE-2012-1106
Fixed in a distro release EPSS <1%
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
Products: redhat automatic_bug_reporting_tool
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | abrt | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-addon-ccpp | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-addon-kerneloops | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-addon-python | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-addon-vmcore | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-cli | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-debuginfo | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-desktop | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-devel | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-gui | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-libs | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | abrt-tui | 0:2.0.8-6.el6 |
| Red Hat Enterprise Linux 6 | btparser | 0:0.16-3.el6 |
| Red Hat Enterprise Linux 6 | btparser-debuginfo | 0:0.16-3.el6 |
| Red Hat Enterprise Linux 6 | btparser-devel | 0:0.16-3.el6 |
| Red Hat Enterprise Linux 6 | btparser-python | 0:0.16-3.el6 |
| Red Hat Enterprise Linux 6 | libreport | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-cli | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-debuginfo | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-devel | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-gtk | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-gtk-devel | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-newt | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-bugzilla | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-kerneloops | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-logger | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-mailx | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-reportuploader | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-plugin-rhtsupport | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | libreport-python | 0:2.0.9-5.el6 |
| Red Hat Enterprise Linux 6 | python-meh | 0:0.12.1-3.el6 |