CVE-2012-5660
Fixed in a distro release EPSS <1%
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
Products: redhat automatic_bug_reporting_tool
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 6 | abrt | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-addon-ccpp | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-addon-kerneloops | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-addon-python | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-addon-vmcore | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-cli | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-debuginfo | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-desktop | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-devel | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-gui | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-libs | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | abrt-tui | 0:2.0.8-6.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-cli | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-debuginfo | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-devel | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-gtk | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-gtk-devel | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-newt | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-bugzilla | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-kerneloops | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-logger | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-mailx | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-reportuploader | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-plugin-rhtsupport | 0:2.0.9-5.el6_3.2 |
| Red Hat Enterprise Linux 6 | libreport-python | 0:2.0.9-5.el6_3.2 |