← back
CVE-2015-5287

CVE-2015-5287

EPSS 3.3%
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Affected products
n/a · n/a
public PoCs found — 5
cve_referencepacketstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.htmlunverifiedcve_referencewww.exploit-db.com/exploits/38832/unverifiedexploitdbwww.exploit-db.com/exploits/47421unverifiedexploitdbwww.exploit-db.com/exploits/38832unverifiedexploitdbwww.exploit-db.com/exploits/38835unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/154592/ABRT-sosreport-Privilege-Escalation.htmlhttp://rhn.redhat.com/errata/RHSA-2015-2505.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1266837https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740ehttps://www.exploit-db.com/exploits/38832/http://www.openwall.com/lists/oss-security/2015/12/01/1http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/78137