CVE-2015-5287

What is CVE-2015-5287?

Original source data

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Verify to continue the analysis

A short verification protects the vulnerability source and prevents automated AI abuse.

Overview

Original source data

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Affected products and scope

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Technical details

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Exploitability

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Technical impact

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Business impact

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Remediation

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Detection

CyStack is analyzing this vulnerability. The page will update automatically when the analysis is ready.

Sources (4)

GCVE / Vulnerability-Lookup

CISA Known Exploited Vulnerabilities

Other references

Learn more

Run an in-depth assessment with complete web risk management

CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.

Explore CyStack VulnScan

Explore other related solutions

automatic_bug_reporting_tool

redhat

linux

oracle

enterprise_linux

redhat

View all security vulnerabilities