Name: CVE-2015-1869: Improper Link Resolution Before File Access
Creator: Rapid7
Published: 2020-01-14T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2015-1869, CWE-59, CVSS 7.8, EPSS 0.00148

The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain privileges as demonstrated by a symlink attack on a var_log_messages file.

CVSS Details

CVSS 3.1 Base Score: 7.8
CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Centos_linux	—	Upgrade abrt-tuiUpgrade abrt-addon-upload-watchUpgrade abrt-addon-xorgUpgrade libreport-compatUpgrade libreport-plugin-ureportUpgrade abrt-cliUpgrade abrt-dbusUpgrade libreport-gtk-develUpgrade abrt-guiUpgrade abrt-gui-libsUpgrade libreport-plugin-rhtsupportUpgrade libreport-webUpgrade abrt-gui-develUpgrade libreport-pythonUpgrade libreport-cliUpgrade libreport-plugin-mantisbtUpgrade libreport-gtkUpgrade libreport-filesystemUpgrade abrt-retrace-clientUpgrade abrt-addon-vmcoreUpgrade abrtUpgrade libreport-plugin-loggerUpgrade abrt-python-docUpgrade libreport-newtUpgrade libreport-anacondaUpgrade libreport-rhelUpgrade abrt-desktopUpgrade libreport-centosUpgrade libreport-plugin-mailxUpgrade abrt-console-notificationUpgrade libreport-web-develUpgrade abrt-addon-pstoreoopsUpgrade libreport-plugin-kerneloopsUpgrade libreport-plugin-bugzillaUpgrade libreport-develUpgrade abrt-develUpgrade abrt-pythonUpgrade abrt-addon-kerneloopsUpgrade abrt-libsUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreportUpgrade abrt-addon-pythonUpgrade libreport-plugin-reportuploaderUpgrade abrt-addon-ccppUpgrade libreport-rhel-bugzilla	Aug 17, 2018	Jun 15, 2015
Oracle_linux	—	Upgrade abrt-guiUpgrade abrt-pythonUpgrade libreport-plugin-loggerUpgrade libreport-rhel-anaconda-bugzillaUpgrade libreport-develUpgrade abrt-addon-upload-watchUpgrade abrt-cliUpgrade libreport-compatUpgrade libreport-cliUpgrade abrt-addon-kerneloopsUpgrade libreport-web-develUpgrade abrt-addon-pstoreoopsUpgrade libreport-gtkUpgrade abrt-libsUpgrade libreport-plugin-mailxUpgrade abrt-gui-develUpgrade libreport-gtk-develUpgrade abrt-console-notificationUpgrade abrt-python-docUpgrade abrt-addon-vmcoreUpgrade abrt-addon-pythonUpgrade abrt-dbusUpgrade abrt-develUpgrade abrtUpgrade libreport-webUpgrade libreport-pythonUpgrade libreport-anacondaUpgrade abrt-gui-libsUpgrade libreport-rhel-bugzillaUpgrade libreport-newtUpgrade libreport-plugin-ureportUpgrade abrt-addon-xorgUpgrade abrt-desktopUpgrade libreport-filesystemUpgrade libreport-plugin-reportuploaderUpgrade libreportUpgrade libreport-plugin-kerneloopsUpgrade abrt-tuiUpgrade libreport-plugin-bugzillaUpgrade abrt-retrace-clientUpgrade abrt-addon-ccpp	Oct 16, 2024	Jan 14, 2020

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence