CVE-2015-1862

概要

参考情報

• packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html · Exploit
• packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html · Exploit
• packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.html · Exploit
• seclists.org/fulldisclosure/2015/Apr/34 · Mailing List
• openwall.com/lists/oss-security/2015/04/14/4 · Mailing List
• securityfocus.com/bid/74263 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• abrt/abrt#810 · Issue Tracking
• exploit-db.com/exploits/36746 · Exploit
• exploit-db.com/exploits/36747 · Exploit

automatic bug reporting tool のその他の脆弱性

• CVE-2011-4088高 7.5ABRT might allow attackers to obtain sensitive information from crash reports.
• CVE-2013-4209低 3.3Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors relate…
• CVE-2015-3142中 4.7The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing c…
• CVE-2015-1870中 5.5The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, …
• CVE-2015-5287高 7.8悪用確認済み（CISA KEV）The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv…