PT-2020-7832 · Abrt+2 · Abrt+2

Florian Weimer · Published 2015-06-09 · Updated 2023-02-13 · CVE-2015-3151

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: ABRT (affected versions not specified)

Description: A directory traversal issue in abrt-dbus within the Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files. This can be achieved via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CESA-2015_1083

CVE-2015-3151

RHSA-2015:1083

RHSA-2015_1083

Affected Products

Abrt

Centos

Red Hat

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/abrt_raceabrt_priv_esc.rb · Exploit
• https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3 · Patch
• https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b · Patch
• https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932 · Patch
• https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277 · Patch
• https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-3151 · Security Note
• https://linux.oracle.com/errata/ELSA-2015-1083.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151 · Note