CVE-2012-1106

published 2012-07-03

CVE-2012-1106: The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files…

low 1.9 CVSS 3.1

AV L AC M Au N C P I N A N

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
redhat	automatic_bug_reporting_tool	<= 2.0.7	—

CWE-264