CVE-2015-5273 - CERT CVE
ID CVE-2015-5273
Sažetak The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.
Reference
CVSS
Base: 3.6
Impact: 4.9
Exploitability:3.9
Pristup
VektorSloženostAutentikacija
LOCAL LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
NONE PARTIAL PARTIAL
CVSS vektor AV:L/AC:L/Au:N/C:N/I:P/A:P
Zadnje važnije ažuriranje 13-02-2023 - 00:52
Objavljeno 07-12-2015 - 18:59