CVE Feed

    Dashboard / CVE / CVE-2015-3151

    CVE-2015-3151

    Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.

    Published:Apr 22, 2015
    Last Modified:Nov 21, 2024
    EPS:Jan 14, 2020
    EPSS Score:0.0007
    CVSS Score:7.8

    Affected Products

    Vendor
    Redhat
    Product
    Automatic Bug Reporting Tool
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-54231 (CVSS 5.5) — A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The ev…
    CVE-2026-54230 (CVSS 7) — A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event …
    CVE-2015-5287 (CVSS 7.8) — The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with ce…
    CVE-2015-5273 (CVSS 3.6) — The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7…
    CVE-2015-3159 (CVSS 7.8) — The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not p…
    CVE-2015-3150 (CVSS 7.1) — abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbit…
    CVE-2015-1870 (CVSS 5.5) — The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport…
    CVE-2015-1869 (CVSS 7.8) — The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges…
    CVE-2015-3147 (CVSS 6.5) — daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spo…
    CVE-2015-3142 (CVSS 4.7) — The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the owner…

    References

    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151
    https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3
    https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
    https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
    https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
    https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364
    https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151
    https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3
    https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
    https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
    https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
    https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High