low3.6Public exploit code
CVE-2015-5273
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- abrt (Centos 7.1 / Fedora 22) - Local Privilege Escalation2015-12-01 · local · multiple · Verified
Impact
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Automatic Bug Reporting Tool | through 2.7.0 |
| Redhat | Enterprise Linux Desktop | Version 7.0 |
| Redhat | Enterprise Linux Hpc Node | Version 7.0 |
| Redhat | Enterprise Linux Server | Version 7.0 |
| Redhat | Enterprise Linux Workstation | Version 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html
- http://rhn.redhat.com/errata/RHSA-2015-2505.html
- http://www.openwall.com/lists/oss-security/2015/12/01/1
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/78113
- https://bugzilla.redhat.com/show_bug.cgi?id=1262252
- https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e
- http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html
- http://rhn.redhat.com/errata/RHSA-2015-2505.html
- http://www.openwall.com/lists/oss-security/2015/12/01/1
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.securityfocus.com/bid/78113
- https://bugzilla.redhat.com/show_bug.cgi?id=1262252
- https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e