Description (CNA)
Directory traversal vulnerability in abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to read, write to, or change ownership of arbitrary files via unspecified vectors to the (1) NewProblem, (2) GetInfo, (3) SetElement, or (4) DeleteElement method.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ABRT / ABRT | affected before 7a47f57975be0d285a2f20758e4572dca6d9cdd3 |
CWE
No CWE identifiers supplied.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151
- https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
- https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
- https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364
- https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
- https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3
ADP enrichment
No English description supplied.
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2015-3151
- https://github.com/abrt/abrt/commit/c796c76341ee846cfb897ed645bac211d7d0a932
- https://github.com/abrt/abrt/commit/f3c2a6af3455b2882e28570e8a04f1c2d4500d5b
- https://github.com/abrt/libreport/commit/54ecf8d017580b495d6501e53ca54e453a73a364
- https://github.com/abrt/libreport/commit/239c4f7d1f47265526b39ad70106767d00805277
- https://github.com/abrt/abrt/commit/7a47f57975be0d285a2f20758e4572dca6d9cdd3