Lucene search

K
nvd[email protected]NVD:CVE-2012-5660
HistoryMar 12, 2013 - 11:55 p.m.

CVE-2012-5660

2013-03-1223:55:01
CWE-264
CWE-362
web.nvd.nist.gov

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on “the directories used to store information about crashes.”

Affected configurations

NVD
Node
redhatautomatic_bug_reporting_toolRange2.0.9
OR
redhatautomatic_bug_reporting_toolMatch2.0.0
OR
redhatautomatic_bug_reporting_toolMatch2.0.1
OR
redhatautomatic_bug_reporting_toolMatch2.0.2
OR
redhatautomatic_bug_reporting_toolMatch2.0.3
OR
redhatautomatic_bug_reporting_toolMatch2.0.4
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.980
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.981
OR
redhatautomatic_bug_reporting_toolMatch2.0.5
OR
redhatautomatic_bug_reporting_toolMatch2.0.6
OR
redhatautomatic_bug_reporting_toolMatch2.0.7
OR
redhatautomatic_bug_reporting_toolMatch2.0.8

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%