exploitDog

CVE-2012-1106

Опубликовано: 06 фев. 2012

Источник: redhat

CVSS2: 1.2

EPSS Низкий

Описание

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=785163abrt: Setuid process core dump archived with unsafe GID permissions

EPSS

Процентиль: 14%

0.00047

Низкий

1.2 Low

CVSS2

Связанные уязвимости

CVE-2012-1106

nvd

больше 13 лет назад

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

GHSA-rph2-33pr-67ww

github

больше 3 лет назад

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

ELSA-2012-0841

oracle-oval

больше 13 лет назад

ELSA-2012-0841: abrt, libreport, btparser, and python-meh security and bug fix update (LOW)

EPSS

Процентиль: 14%

0.00047

Низкий

1.2 Low

CVSS2