PT-2017-6533 · Red Hat+1 · Abrt+2

Florian Weimer · Published 2015-06-09 · Updated 2023-02-13 · CVE-2015-1870

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Automatic Bug Reporting Tool (ABRT) (affected versions not specified)

Description The issue concerns the event scripts in ABRT, which use world-readable permission on a copy of the sosreport file in problem directories. This allows local users to obtain sensitive information from /var/log/messages via unspecified vectors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CESA-2015_1083

CVE-2015-1870

RHSA-2015:1083

RHSA-2015:1210

RHSA-2015_1083

RHSA-2015_1210

Affected Products

Abrt

Centos

Red Hat

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/abrt_raceabrt_priv_esc.rb · Exploit
• https://github.com/abrt/abrt/commit/7d023c32a565e83306cddf34c894477b7aaf33d1 · Patch
• https://github.com/abrt/abrt/commit/8939398b82006ba1fec4ed491339fc075f43fc7c · Patch
• https://github.com/abrt/libreport/commit/c962918bc70a61a8cc647898ee8b1ff1c14a87c5 · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=1212868 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1210.html · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2015-1083.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1083.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-1210.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1870 · Security Note
• http://securityfocus.com/bid/75119 · Note