Redhat

Automatic Bug Reporting Tool

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8

CVE-2015-1869

  • EPSS 0.15%
  • Veröffentlicht 14.01.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 02:26:18

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.

6.5

CVE-2015-3147

  • EPSS 0.54%
  • Veröffentlicht 14.01.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 02:28:46

daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified impact via a symlink attack on (1) /var/sp...

7.2

CVE-2015-3150

  • EPSS 0.05%
  • Veröffentlicht 14.01.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 02:28:46

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.

7.8

CVE-2015-3151

  • EPSS 0.07%
  • Veröffentlicht 14.01.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 02:28:46

Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) Dele...

7.8

CVE-2015-3159

  • EPSS 0.16%
  • Veröffentlicht 14.01.2020 18:15:10
  • Zuletzt bearbeitet 21.11.2024 02:28:47

The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows local users to gain privileges.

3.3

CVE-2013-4209

  • EPSS 0.04%
  • Veröffentlicht 01.05.2018 19:29:00
  • Zuletzt bearbeitet 21.11.2024 01:55:08

Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums.

5.5

CVE-2015-1870

  • EPSS 0.11%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

4.7

CVE-2015-3142

  • EPSS 0.11%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to...

7.8

CVE-2015-3315

  • EPSS 6.35%
  • Veröffentlicht 26.06.2017 15:29:00
  • Zuletzt bearbeitet 20.04.2025 01:37:25

Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2) /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-r...

6.9

CVE-2015-5287

Exploit
  • EPSS 12.9%
  • Veröffentlicht 07.12.2015 18:59:02
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-cored...