CVE-2012-1106

abrt: Setuid process core dump archived with unsafe GID permissions

Severity Score

1.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

El controlador de C plug-in en la herramienta automática de informe de errores (ABRT), posiblemente v2.0.8 y versiones anteriores, no establecer correctamente los permisos de grupo (GID) en los ficheros de volcado del núcleo ("code dump") para progarmas con el setuid activado cuando la opción fs.suid_dumpable en sysctl se establece a 2, lo que permite a usuarios locales obtener información sensible.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

Attack Vector

Local

Attack Complexity

High

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-02-14 CVE Reserved
2012-06-20 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
2024-08-06 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-264: Permissions, Privileges, and Access Controls

CAPEC

References (6)

URL	Tag	Source
http://www.securityfocus.com/bid/54121	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/76524	Vdb Entry

URL	Date	SRC
https://fedorahosted.org/abrt/changeset/23d6997d7886abe118c28254f7f73f0b19b2d4e0	2024-08-06

URL	Date	SRC

URL	Date	SRC
http://rhn.redhat.com/errata/RHSA-2012-0841.html	2017-08-29
https://access.redhat.com/security/cve/CVE-2012-1106	2012-06-19
https://bugzilla.redhat.com/show_bug.cgi?id=785163	2012-06-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Redhat Search vendor "Redhat"		Automatic Bug Reporting Tool Search vendor "Redhat" for product "Automatic Bug Reporting Tool"				<= 2.0.7 Search vendor "Redhat" for product "Automatic Bug Reporting Tool" and version " <= 2.0.7"		-		Affected