CVEvulnerability
CVE-2012-1106
1.9 LOW
Official page ↗
- Status
- Modified
- Published
- 2012-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.9 LOW — AV:L/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
Affected configurations
• redhat automatic bug reporting tool (<= 2.0.7)
Related
Weakness · not in database (1)
References
- http://rhn.redhat.com/errata/RHSA-2012-0841.html rhn.redhat.com
- http://www.securityfocus.com/bid/54121 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76524 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0 Exploit, Patch
- http://rhn.redhat.com/errata/RHSA-2012-0841.html rhn.redhat.com
- http://www.securityfocus.com/bid/54121 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/76524 exchange.xforce.ibmcloud.com
- https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0 Exploit, Patch