PT-2020-7831 · Abrt-Dbus+2 · Abrt-Dbus+2

Florian Weimer · Published 2015-06-09 · Updated 2023-02-13 · CVE-2015-3150

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: abrt-dbus (affected versions not specified)

Description: The issue allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method. A local attacker could use this flaw to take ownership of arbitrary files and directories, or to delete files and directories as the root user.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CESA-2015_1083

CVE-2015-3150

RHSA-2015:1083

RHSA-2015_1083

Affected Products

Centos

Red Hat

Abrt-Dbus

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/abrt_raceabrt_priv_esc.rb · Exploit
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7 · Patch
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1 · Patch
• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8 · Patch
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75 · Patch
• https://linux.oracle.com/errata/ELSA-2015-1083.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3150 · Security Note
• https://t.me/cvenotify/43485 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=1214457 · Note