) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- CPE Product Version: cpe:/a:redhat:automatic_bug_reporting_tool:2.0.18
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2013-4209 |
Automatic Bug Reporting Tool (ABRT) before 2.1.6 allows local users to obtain sensitive information about arbitrary files via vectors related to sha1sums. Published: May 01, 2018; 3:29:00 PM -0400 |
V3.0: 3.3 LOW V2.0: 2.1 LOW |
| CVE-2015-3142 |
The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application. Published: June 26, 2017; 11:29:00 AM -0400 |
V3.0: 4.7 MEDIUM V2.0: 1.9 LOW |
| CVE-2015-1870 |
The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in problem directories, which allows local users to obtain sensitive information from /var/log/messages via unspecified vectors. Published: June 26, 2017; 11:29:00 AM -0400 |
V3.0: 5.5 MEDIUM V2.0: 2.1 LOW |
| CVE-2015-5287 |
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump. Published: December 07, 2015; 1:59:02 PM -0500 |
V3.x:(not available) V2.0: 6.9 MEDIUM |
| CVE-2015-5273 |
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp. Published: December 07, 2015; 1:59:00 PM -0500 |
V3.x:(not available) V2.0: 3.6 LOW |