CVE-2009-1295

2009-04-3020:30:00

CWE-16

[email protected]

web.nvd.nist.gov

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

Percentile

5.1%

JSON

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application’s crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.

Affected configurations

Nvd

Node

apportapportRange≤0.1.0.8.1

ubuntuubuntuMatch8.0.4_lts

ubuntuubuntuMatch8.1.0

ubuntuubuntuMatch9.0.4

VendorProductVersionCPE
apportapport*cpe:2.3:a:apport:apport:*:*:*:*:*:*:*:*
ubuntuubuntu8.0.4_ltscpe:2.3:o:ubuntu:ubuntu:8.0.4_lts:*:*:*:*:*:*:*
ubuntuubuntu8.1.0cpe:2.3:o:ubuntu:ubuntu:8.1.0:*:*:*:*:*:*:*
ubuntuubuntu9.0.4cpe:2.3:o:ubuntu:ubuntu:9.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apport	apport	*	cpe:2.3:a:apport:apport::::::::
ubuntu	ubuntu	8.0.4_lts	cpe:2.3:o:ubuntu:ubuntu:8.0.4_lts:::::::*
ubuntu	ubuntu	8.1.0	cpe:2.3:o:ubuntu:ubuntu:8.1.0:::::::*
ubuntu	ubuntu	9.0.4	cpe:2.3:o:ubuntu:ubuntu:9.0.4:::::::*