CVE-2015-1869

Опубликовано: 14 янв. 2020

Источник: nvd

CVSS3: 7.8

CVSS2: 7.2

EPSS Низкий

Описание

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.

Ссылки

http://www.openwall.com/lists/oss-security/2015/04/17/5
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1212861
Issue Tracking
Third Party Advisory
https://github.com/abrt/abrt/commit/3287aa12eb205cff95cdd00d6d6c5c9a4f8f0eca
Patch
Third Party Advisory
https://github.com/abrt/abrt/commit/7417505e1d93cc95ec648b74e3c801bc67aacb9f
Patch
Third Party Advisory
http://www.openwall.com/lists/oss-security/2015/04/17/5
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1212861
Issue Tracking
Third Party Advisory
https://github.com/abrt/abrt/commit/3287aa12eb205cff95cdd00d6d6c5c9a4f8f0eca
Patch
Third Party Advisory
https://github.com/abrt/abrt/commit/7417505e1d93cc95ec648b74e3c801bc67aacb9f
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:-:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.00148

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59

Связанные уязвимости

CVE-2015-1869

redhat

больше 10 лет назад

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.

GHSA-qpcr-j696-v456

CVSS3: 7.8

github

больше 3 лет назад

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.

ELSA-2015-1210

oracle-oval

около 10 лет назад

ELSA-2015-1210: abrt security update (MODERATE)

ELSA-2015-1083

oracle-oval

около 10 лет назад

ELSA-2015-1083: abrt security update (IMPORTANT)

EPSS

Процентиль: 36%

0.00148

Низкий

7.8 High

CVSS3

7.2 High

CVSS2

Дефекты

CWE-59