Apport vulnerability

2009-04-2900:00:00

ubuntu.com

CVSS2

1.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

Percentile

5.1%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04

Packages

apport -

Details

Stephane Chazelas discovered that Apport did not safely remove files from
its crash report directory. If Apport had been enabled at some point, a
local attacker could remove arbitrary files from the system.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchapport< 1.0-0ubuntu5.2UNKNOWN
Ubuntu9.04noarchapport-gtk< 1.0-0ubuntu5.2UNKNOWN
Ubuntu9.04noarchapport-qt< 1.0-0ubuntu5.2UNKNOWN
Ubuntu9.04noarchapport-retrace< 1.0-0ubuntu5.2UNKNOWN
Ubuntu9.04noarchpython-apport< 1.0-0ubuntu5.2UNKNOWN
Ubuntu9.04noarchpython-problem-report< 1.0-0ubuntu5.2UNKNOWN
Ubuntu8.10noarchapport< 0.119.2UNKNOWN
Ubuntu8.10noarchapport-gtk< 0.119.2UNKNOWN
Ubuntu8.10noarchapport-qt< 0.119.2UNKNOWN
Ubuntu8.10noarchapport-retrace< 0.119.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	apport	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	apport-gtk	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	apport-qt	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	apport-retrace	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	python-apport	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	9.04	noarch	python-problem-report	< 1.0-0ubuntu5.2	UNKNOWN
Ubuntu	8.10	noarch	apport	< 0.119.2	UNKNOWN
Ubuntu	8.10	noarch	apport-gtk	< 0.119.2	UNKNOWN
Ubuntu	8.10	noarch	apport-qt	< 0.119.2	UNKNOWN
Ubuntu	8.10	noarch	apport-retrace	< 0.119.2	UNKNOWN