RedHat Update for abrt and libreport RHSA-2015:2505-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Security Advisory: abrt and libreport security update

Updated abrt and libreport packages that fix three security issues are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

ABRT Local Information Disclosure Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Multiple Local Security Bypass Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local security bypass vulnerabilities. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Multiple Local Elevation of Privilege Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local elevation of privilege vulnerabilities. A local attacker can exploit this vulnerability to gain elevated privileges...

ABRT Local Elevation of Privilege Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local boost elevation vulnerability. A local attacker can exploit this vulnerability to gain root privileges...

Multiple Local Information Disclosure Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT has multiple local information disclosure vulnerabilities. A local attacker could exploit the vulnerabilities to obtain sensitive information...

Multiple Directory Traversal Vulnerability in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple directory traversal vulnerabilities. A local attacker can exploit this vulnerability by sending a request with the directory traversal character '...' with the directory traversal character '...'...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

PT-2017-6533 · Red Hat +1 · Abrt +2

Name of the Vulnerable Software and Affected Versions: Automatic Bug Reporting Tool ABRT affected versions not specified Description: The issue concerns the event scripts in ABRT, which use world-readable permission on a copy of the sosreport file in problem directories. This allows local users t...

PT-2020-7834 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the abrt-action-install-debuginfo-to-abrt-cache help program in the Automatic Bug Reporting Tool ABRT, which fails to properly handle the process environment before invoking...

PT-2020-7832 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: A directory traversal issue in abrt-dbus within the Automatic Bug Reporting Tool ABRT allows local users to read, write to, or change ownership of arbitrary files. This can be achieved via...

Fedora abrt competitive conditions vulnerability

Fedora is an open, innovative and forward-thinking operating system and platform based on Linux.ABRT is an automated bug detection and reporting tool. A competitive condition vulnerability exists in Fedora abrt. An attacker can exploit this vulnerability to gain privileges...

Apport/Abrt Local Privilege Vulnerability

Apport is the crash report service on ubuntu, that is, when a program crashes the pop-up program that sends an error report. ABRT is an automated bug detection and reporting tool. Apport/Abrt is vulnerable to a local privilege exploit. An attacker can exploit the vulnerability to gain root...

Thanks to the researchers 2015

Research Thanks to the researchers 2015 Share January 16th, 2015 At Opera Software, we run a large number of websites for our products and services, and we like to give credit to the researchers and website testers who offer their assistance to help us tighten the security of those websites. We...

LinSSID - Graphical wireless scanning for Linux (similar to Inssider)

LinSSID is graphically and functionally similar to Inssider Microsoft™ Windows®. It is written in C++ using Linux wireless tools, Qt5, and Qwt 6.1. LinSSID may be installed either by downloading source or binary from this site, or if you're using Debian/Ubuntu or one of its brethren, adding a ppa...

Announcing Project Zero

Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We’ve invested a lot in making our products secure, including strong SSL encryption by default for Search, Gmail and Drive, as well as encrypting data moving between our data centers. Beyond securing our own products,...

Apple Fixes Critical Hole in Developer Center, Radar

Apple patched a potentially serious hole in its Developer Center earlier this week that could have given anyone unfettered access to the personal contact information of company developers, retail employees and even executives. Ironically enough, the bug existed in Apple’s internal bug reporting a...

Hacking Facebook to delete any account; Facebook again refuses to pay Bounty

In the past few days, Facebook refused to pay bounty to Khalil Shreateh, the security researcher who used the bug he discovered to post directly on Facebook CEO Mark Zuckerberg's Timeline after Facebook Security rejected his attempts to report it. Ehraz Ahmed, an independent Security Researcher...