CVE-2012-1106
Description
The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.
Risk Information
Base Score
5.5
MODERATE
Vector
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
0.047
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-0.16-3.el6.i686.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-0.16-3.el6.x86_64.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-devel-0.16-3.el6.i686.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-devel-0.16-3.el6.x86_64.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-python-0.16-3.el6.i686.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update btparser-python-0.16-3.el6.x86_64.rpm | Linux |
| (RHSA-2012:0841) Low: abrt, libreport, btparser, and python-meh security and bug fix update python-meh-0.12.1-3.el6.noarch.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234