CVEvulnerability
CVE-2009-1295
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-04-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-16
Description
Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.
Affected configurations
• apport apport (<= 0.1.0.8.1)
• ubuntu ubuntu 8.0.4 lts
• ubuntu ubuntu 8.1.0
• ubuntu ubuntu 9.0.4
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/34947 secunia.com
- http://secunia.com/advisories/34952 secunia.com
- http://secunia.com/advisories/35065 secunia.com
- http://www.securityfocus.com/bid/34776 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-768-1 Vendor Advisory
- https://bugs.launchpad.net/bugs/357024 Exploit
- https://launchpad.net/bugs/cve/2009-1295 launchpad.net
- http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html lists.opensuse.org
- http://secunia.com/advisories/34947 secunia.com
- http://secunia.com/advisories/34952 secunia.com
- http://secunia.com/advisories/35065 secunia.com
- http://www.securityfocus.com/bid/34776 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-768-1 Vendor Advisory
- https://bugs.launchpad.net/bugs/357024 Exploit
- https://launchpad.net/bugs/cve/2009-1295 launchpad.net