CVE-2015-5273

Related Files

CentOS 7.1 / Fedora 22 abrt Local Root

Posted Dec 1, 2015

Authored by rebel

CentOS version 7.1 and Fedora version 22 abrt local root exploit. It leverages abrt-hook-ccpp insecure open() usage and abrt-action-install-debuginfo insecure temp directory usage.

tags | exploit, local, root

systems | linux, fedora, centos

advisories | CVE-2015-5273, CVE-2015-5287

SHA-256 | 2e6ff628343956da9862f4ece546ad0fa5bec7f2f3e42781031bd4c8eee3ff37

Download | Favorite | View

Red Hat Security Advisory 2015-2505-01

Posted Nov 23, 2015

Authored by Red Hat | Site access.redhat.com

Red Hat Security Advisory 2015-2505-01 - ABRT is a tool to help users to detect defects in applications and to create a bug report with all the information needed by a maintainer to fix it. It uses a plug-in system to extend its functionality. libreport provides an API for reporting different problems in applications to different bug targets, such as Bugzilla, FTP, and Trac. It was found that the ABRT debug information installer did not use temporary directories in a secure way. A local attacker could use the flaw to create symbolic links and files at arbitrary locations as the abrt user.

tags | advisory, arbitrary, local

systems | linux, redhat

advisories | CVE-2015-5273, CVE-2015-5287, CVE-2015-5302

SHA-256 | 96ace45f7feb868e68722af714fbf8c6b1b7e30c0c115609d93d96fa1c299b11

Download | Favorite | View