Lucene search

K
nvd[email protected]NVD:CVE-2012-5659
HistoryMar 12, 2013 - 11:55 p.m.

CVE-2012-5659

2013-03-1223:55:01
web.nvd.nist.gov

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Affected configurations

NVD
Node
redhatautomatic_bug_reporting_toolRange2.0.9
OR
redhatautomatic_bug_reporting_toolMatch2.0.0
OR
redhatautomatic_bug_reporting_toolMatch2.0.1
OR
redhatautomatic_bug_reporting_toolMatch2.0.2
OR
redhatautomatic_bug_reporting_toolMatch2.0.3
OR
redhatautomatic_bug_reporting_toolMatch2.0.4
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.980
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.981
OR
redhatautomatic_bug_reporting_toolMatch2.0.5
OR
redhatautomatic_bug_reporting_toolMatch2.0.6
OR
redhatautomatic_bug_reporting_toolMatch2.0.7
OR
redhatautomatic_bug_reporting_toolMatch2.0.8

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%