CVE-2015-5287

Published: Dec 7, 2015Modified: May 6, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Affected (5)

Products: Redhat: Automatic Bug Reporting Tool, Enterprise Linux Desktop, Enterprise Linux Hpc Node, Enterprise Linux Server, Enterprise Linux Workstation

5 products

Automatic Bug Reporting Tool

Enterprise Linux Desktop

Enterprise Linux Hpc Node

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Automatic Bug Reporting Tool	Up to 2.7.0

Configuration B

4 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 7.0
Redhat Enterprise Linux Hpc Node	Version 7.0
Redhat Enterprise Linux Server	Version 7.0
Redhat Enterprise Linux Workstation	Version 7.0

Related CWEs

Improper Link Resolution Before File Access ('Link Following')

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

References (16)

http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2015-2505.html

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/12/01/1

Source: secalert@redhat.com

Exploit

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/78137

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=1266837

Source: secalert@redhat.com

Exploit

https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e

Source: secalert@redhat.com

https://www.exploit-db.com/exploits/38832/

Source: secalert@redhat.com

http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2015-2505.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2015/12/01/1

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/78137

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=1266837

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/38832/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.