abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and previous versions allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat automatic bug reporting tool 2.0.6 |
||
redhat automatic bug reporting tool 2.0.4.981 |
||
redhat automatic bug reporting tool 2.0.8 |
||
redhat automatic bug reporting tool |
||
redhat automatic bug reporting tool 2.0.5 |
||
redhat automatic bug reporting tool 2.0.2 |
||
redhat automatic bug reporting tool 2.0.7 |
||
redhat automatic bug reporting tool 2.0.4.980 |
||
redhat automatic bug reporting tool 2.0.1 |
||
redhat automatic bug reporting tool 2.0.0 |
||
redhat automatic bug reporting tool 2.0.4 |
||
redhat automatic bug reporting tool 2.0.3 |