CVE

Id
96770  
CVE No.
CVE-2016-9950  
Status
Candidate  
Description
An issue was discovered in Apport before 2.20.4. There is a path traversal issue in the Apport crash file "Package" and "SourcePackage" fields. These fields are used to build a path to the package specific hook files in the /usr/share/apport/package-hooks/ directory. An attacker can exploit this path traversal to execute arbitrary Python files from the local system.  
Phase
Assigned (20161214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
801661 96770 CVE-2016-9950 EXPLOIT-DB:40937  View
801662 96770 CVE-2016-9950 URL:https://www.exploit-db.com/exploits/40937/  View
801663 96770 CVE-2016-9950 MISC:https://bugs.launchpad.net/apport/+bug/1648806  View
801664 96770 CVE-2016-9950 MISC:https://donncha.is/2016/12/compromising-ubuntu-desktop/  View
801665 96770 CVE-2016-9950 MISC:https://github.com/DonnchaC/ubuntu-apport-exploitation  View
801666 96770 CVE-2016-9950 UBUNTU:USN-3157-1  View
801667 96770 CVE-2016-9950 URL:http://www.ubuntu.com/usn/USN-3157-1  View
801668 96770 CVE-2016-9950 BID:95011  View

Related JVN