CVE-2015-1862

Mô tả

Tham khảo

• packetstormsecurity.com/files/131422/Fedora-abrt-Race-Condition.html · Exploit
• packetstormsecurity.com/files/131423/Linux-Apport-Abrt-Local-Root-Exploit.html · Exploit
• packetstormsecurity.com/files/131429/Abrt-Apport-Race-Condition-Symlink.html · Exploit
• seclists.org/fulldisclosure/2015/Apr/34 · Mailing List
• openwall.com/lists/oss-security/2015/04/14/4 · Mailing List
• securityfocus.com/bid/74263 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• abrt/abrt#810 · Issue Tracking
• exploit-db.com/exploits/36746 · Exploit
• exploit-db.com/exploits/36747 · Exploit

Lỗ hổng khác của automatic bug reporting tool

• CVE-2011-4088CAO 7.5ABRT might allow attackers to obtain sensitive information from crash reports.
• CVE-2013-4209THẤP 3.3Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors relate…
• CVE-2015-3142TRUNG BÌNH 4.7The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing c…
• CVE-2015-1870TRUNG BÌNH 5.5The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, …
• CVE-2015-5287CAO 7.8ĐANG BỊ KHAI THÁC (CISA KEV)The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv…