Bug 461846 – <app-admin/abrt-2.0.9: two vulnerabilities (CVE-2012-{5659,5660})

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Agostino Sarubbo 2013-03-15 19:26:10 UTC]

From ${URL} :

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in 
Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute 
arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious 
Python module.

[Comment 1 Agostino Sarubbo 2013-03-17 14:07:35 UTC]

and http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2012-5660 :

abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."

[Comment 2 GLSAMaker/CVETool Bot 2013-03-19 20:17:07 UTC]

CVE-2012-5660 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5660):
  abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9
  and earlier allows local users to set world-writable permissions for
  arbitrary files and possibly gain privileges via a symlink attack on "the
  directories used to store information about crashes."

CVE-2012-5659 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2012-5659):
  Untrusted search path vulnerability in
  plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug
  Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and
  execute arbitrary Python modules by modifying the PYTHONPATH environment
  variable to reference a malicious Python module.

[Comment 3 Chris Reffett (RETIRED) 2013-09-17 00:11:53 UTC]

2.0.13 is in tree and stable. GLSA vote: no.

[Comment 4 Sergey Popov (RETIRED) 2013-09-18 05:04:29 UTC]

GLSA vote: no

Closing as noglsa