NetSight
IP …
medium6.9

CVE-2012-5660

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files…

Impact

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."

Affected products

VendorProductAffected versions
RedhatAutomatic Bug Reporting Tool
through 2.0.9
Versions 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4

Weakness classification

CWE-264CWE-362

References