CVE Feed

    Dashboard / CVE / CVE-2015-5273

    CVE-2015-5273

    The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users to write to arbitrary files via a symlink attack on unpacked.cpio in a pre-created directory with a predictable name in /var/tmp.

    Published:Nov 23, 2015
    Last Modified:Apr 12, 2025
    EPS:Dec 7, 2015
    EPSS Score:0.00334
    CVSS Score:3.6

    Affected Products

    Vendor
    Redhat
    Product
    Automatic Bug Reporting Tool
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Enterprise Linux Hpc Node
    Vendor
    Redhat
    Product
    Enterprise Linux Server
    Vendor
    Redhat
    Product
    Enterprise Linux Workstation

    Exploits

    http://www.openwall.com/lists/oss-security/2015/12/01/1https://bugzilla.redhat.com/show_bug.cgi?id=1262252http://www.openwall.com/lists/oss-security/2015/12/01/1https://bugzilla.redhat.com/show_bug.cgi?id=1262252https://www.exploit-db.com/exploits/38835

    Related CVEs

    CVE-2026-54231 (CVSS 5.5) — A content injection vulnerability was found in the ABRT post-create event handler scripts in libreport. The ev…
    CVE-2026-54230 (CVSS 7) — A symlink following vulnerability was found in the ABRT post-create event handler scripts in libreport. Event …
    CVE-2015-5287 (CVSS 7.8) — The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with ce…
    CVE-2015-3159 (CVSS 7.8) — The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does not p…
    CVE-2015-3150 (CVSS 7.1) — abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbit…
    CVE-2015-3151 (CVSS 7.8) — Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to re…
    CVE-2015-1870 (CVSS 5.5) — The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport…
    CVE-2015-1869 (CVSS 7.8) — The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges…
    CVE-2015-3147 (CVSS 6.5) — daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from /var/spo…
    CVE-2015-3142 (CVSS 4.7) — The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the owner…

    References

    http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html
    http://rhn.redhat.com/errata/RHSA-2015-2505.html
    http://www.openwall.com/lists/oss-security/2015/12/01/1
    http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
    http://www.securityfocus.com/bid/78113
    https://bugzilla.redhat.com/show_bug.cgi?id=1262252
    https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e
    http://lists.fedoraproject.org/pipermail/package-announce/2015-November/172809.html
    http://rhn.redhat.com/errata/RHSA-2015-2505.html
    http://www.openwall.com/lists/oss-security/2015/12/01/1
    http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
    http://www.securityfocus.com/bid/78113
    https://bugzilla.redhat.com/show_bug.cgi?id=1262252
    https://github.com/abrt/abrt/commit/50ee8130fb4cd4ef1af7682a2c85dd99cb99424e

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High