CVE-2012-5659

Related Files

Red Hat Security Advisory 2013-0215-01

Posted Feb 1, 2013

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2013-0215-01 - ABRT is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in applications to different bug targets, such as Bugzilla, FTP, and Trac. It was found that the /usr/libexec/abrt-action-install-debuginfo-to-abrt-cache tool did not sufficiently sanitize its environment variables. This could lead to Python modules being loaded and run from non-standard directories. A local attacker could use this flaw to escalate their privileges to that of the abrt user.

tags | advisory, local, python

systems | linux, redhat

advisories | CVE-2012-5659, CVE-2012-5660

SHA-256 | 7f38239b68caa28a939cee16cf54cd786e2838a972acca20d93ec6356f645d91

Download | Favorite | View