NVD

Id
46761  
Name
CVE-2012-5660  
Description
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-03-12  
Modified Date
2013-03-19  
Seq
2012-5660  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
234274 46761 CVE-2012-5660 http://git.fedorahosted.org/cgit/libreport.git/commit/?id=3bbf961b1884dd32654dd39b360dd78ef294b10a  View
234275 46761 CVE-2012-5660 RHSA-2013:0215  View
234276 46761 CVE-2012-5660 https://bugzilla.redhat.com/show_bug.cgi?id=887866  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
20328 JVNDB-2013-001903 自動バグ報告ツール (ABRT) における権限を取得される脆弱性 自動バグ報告ツール (Automatic Bug Reporting Tool、略称 ABRT) の abrt-action-install-debuginfo には、任意のファイルに誰でも読み取り可能な権限 (world-readable パーミッション) を設定されることで、権限を取得される脆弱性が存在します。 CVE-2012-5660 58898 CVE-2012-5660 46761 6.9 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001903.html 2013-01-31 2013-03-21 View