CVE-2015-5273 The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in...
LowCVSS 3.6
EPSS 0.91%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| redhat automatic bug reporting tool | <= 2.7.0 | No fix listed |
| redhat enterprise linux desktop | = 7.0 | No fix listed |
| redhat enterprise linux hpc node | = 7.0 | No fix listed |
| redhat enterprise linux server | = 7.0 | No fix listed |
| redhat enterprise linux workstation | = 7.0 | No fix listed |
References
- FEDORA-2015-79c1758468 vendor-advisory
- RHSA-2015:2505 vendor-advisory
- [oss-security] 20151201 CVE-2015-5273 + CVE-2015-5287, abrt local root in Centos/Fedora/RHEL exploit mailing-list
- www.oracle.com
- 78113 vdb-entry
- bugzilla.redhat.com exploit
- github.com