CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5287

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.05

EPSS Ranking 91.6%

CVSS Severity

CVSS v3 Score 7.8

CVSS v2 Score 6.9

Proposed Action

Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and/or end-of-service (EoS). Users are advised to discontinue use and/or transition to a supported version.

Ransomware Campaign

Unknown

References

Products affected by CVE-2015-5287

Redhat » Automatic Bug Reporting Tool » Version: N/A

cpe:2.3:a:redhat:automatic_bug_reporting_tool:-
Redhat » Automatic Bug Reporting Tool » Version: 0.0.10

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.10
Redhat » Automatic Bug Reporting Tool » Version: 0.0.11

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.11
Redhat » Automatic Bug Reporting Tool » Version: 0.0.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.2
Redhat » Automatic Bug Reporting Tool » Version: 0.0.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.3
Redhat » Automatic Bug Reporting Tool » Version: 0.0.4

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.4
Redhat » Automatic Bug Reporting Tool » Version: 0.0.6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.6
Redhat » Automatic Bug Reporting Tool » Version: 0.0.7

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.7
Redhat » Automatic Bug Reporting Tool » Version: 0.0.7.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.7.1
Redhat » Automatic Bug Reporting Tool » Version: 0.0.8

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.8
Redhat » Automatic Bug Reporting Tool » Version: 0.0.8.5

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.8.5
Redhat » Automatic Bug Reporting Tool » Version: 0.0.9

cpe:2.3:a:redhat:automatic_bug_reporting_tool:0.0.9
Redhat » Automatic Bug Reporting Tool » Version: 1.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0
Redhat » Automatic Bug Reporting Tool » Version: 1.0.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.1
Redhat » Automatic Bug Reporting Tool » Version: 1.0.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.2
Redhat » Automatic Bug Reporting Tool » Version: 1.0.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.3
Redhat » Automatic Bug Reporting Tool » Version: 1.0.4

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.4
Redhat » Automatic Bug Reporting Tool » Version: 1.0.5

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.5
Redhat » Automatic Bug Reporting Tool » Version: 1.0.6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.6
Redhat » Automatic Bug Reporting Tool » Version: 1.0.7

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.7
Redhat » Automatic Bug Reporting Tool » Version: 1.0.7-el6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.7-el6
Redhat » Automatic Bug Reporting Tool » Version: 1.0.7.f12

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.7.f12
Redhat » Automatic Bug Reporting Tool » Version: 1.0.8

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.8
Redhat » Automatic Bug Reporting Tool » Version: 1.0.9

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.0.9
Redhat » Automatic Bug Reporting Tool » Version: 1.1.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.0
Redhat » Automatic Bug Reporting Tool » Version: 1.1.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.1
Redhat » Automatic Bug Reporting Tool » Version: 1.1.10

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.10
Redhat » Automatic Bug Reporting Tool » Version: 1.1.11

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.11
Redhat » Automatic Bug Reporting Tool » Version: 1.1.12

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.12
Redhat » Automatic Bug Reporting Tool » Version: 1.1.13

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.13
Redhat » Automatic Bug Reporting Tool » Version: 1.1.14

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.14
Redhat » Automatic Bug Reporting Tool » Version: 1.1.15

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.15
Redhat » Automatic Bug Reporting Tool » Version: 1.1.16

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.16
Redhat » Automatic Bug Reporting Tool » Version: 1.1.17

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.17
Redhat » Automatic Bug Reporting Tool » Version: 1.1.18

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.18
Redhat » Automatic Bug Reporting Tool » Version: 1.1.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.2
Redhat » Automatic Bug Reporting Tool » Version: 1.1.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.3
Redhat » Automatic Bug Reporting Tool » Version: 1.1.4

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.4
Redhat » Automatic Bug Reporting Tool » Version: 1.1.5

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.5
Redhat » Automatic Bug Reporting Tool » Version: 1.1.6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.6
Redhat » Automatic Bug Reporting Tool » Version: 1.1.7

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.7
Redhat » Automatic Bug Reporting Tool » Version: 1.1.8

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.8
Redhat » Automatic Bug Reporting Tool » Version: 1.1.9

cpe:2.3:a:redhat:automatic_bug_reporting_tool:1.1.9
Redhat » Automatic Bug Reporting Tool » Version: 2.0.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.0
Redhat » Automatic Bug Reporting Tool » Version: 2.0.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.1
Redhat » Automatic Bug Reporting Tool » Version: 2.0.10

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.10
Redhat » Automatic Bug Reporting Tool » Version: 2.0.11

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.11
Redhat » Automatic Bug Reporting Tool » Version: 2.0.12

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.12
Redhat » Automatic Bug Reporting Tool » Version: 2.0.13

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.13
Redhat » Automatic Bug Reporting Tool » Version: 2.0.14

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.14
Redhat » Automatic Bug Reporting Tool » Version: 2.0.15

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.15
Redhat » Automatic Bug Reporting Tool » Version: 2.0.16

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.16
Redhat » Automatic Bug Reporting Tool » Version: 2.0.17

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.17
Redhat » Automatic Bug Reporting Tool » Version: 2.0.18

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.18
Redhat » Automatic Bug Reporting Tool » Version: 2.0.19

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.19
Redhat » Automatic Bug Reporting Tool » Version: 2.0.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.2
Redhat » Automatic Bug Reporting Tool » Version: 2.0.20

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.20
Redhat » Automatic Bug Reporting Tool » Version: 2.0.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.3
Redhat » Automatic Bug Reporting Tool » Version: 2.0.4

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4
Redhat » Automatic Bug Reporting Tool » Version: 2.0.4.980

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4.980
Redhat » Automatic Bug Reporting Tool » Version: 2.0.4.981

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4.981
Redhat » Automatic Bug Reporting Tool » Version: 2.0.5

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.5
Redhat » Automatic Bug Reporting Tool » Version: 2.0.6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.6
Redhat » Automatic Bug Reporting Tool » Version: 2.0.7

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.7
Redhat » Automatic Bug Reporting Tool » Version: 2.0.8

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.8
Redhat » Automatic Bug Reporting Tool » Version: 2.0.9

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.9
Redhat » Automatic Bug Reporting Tool » Version: 2.1.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.0
Redhat » Automatic Bug Reporting Tool » Version: 2.1.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.1
Redhat » Automatic Bug Reporting Tool » Version: 2.1.10

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.10
Redhat » Automatic Bug Reporting Tool » Version: 2.1.11

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.11
Redhat » Automatic Bug Reporting Tool » Version: 2.1.12

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.12
Redhat » Automatic Bug Reporting Tool » Version: 2.1.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.2
Redhat » Automatic Bug Reporting Tool » Version: 2.1.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.3
Redhat » Automatic Bug Reporting Tool » Version: 2.1.4

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.4
Redhat » Automatic Bug Reporting Tool » Version: 2.1.5

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.5
Redhat » Automatic Bug Reporting Tool » Version: 2.1.6

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.6
Redhat » Automatic Bug Reporting Tool » Version: 2.1.7

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.7
Redhat » Automatic Bug Reporting Tool » Version: 2.1.8

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.8
Redhat » Automatic Bug Reporting Tool » Version: 2.1.9

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.1.9
Redhat » Automatic Bug Reporting Tool » Version: 2.2.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.2.0
Redhat » Automatic Bug Reporting Tool » Version: 2.2.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.2.1
Redhat » Automatic Bug Reporting Tool » Version: 2.2.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.2.2
Redhat » Automatic Bug Reporting Tool » Version: 2.3.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.3.0
Redhat » Automatic Bug Reporting Tool » Version: 2.4.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.4.0
Redhat » Automatic Bug Reporting Tool » Version: 2.5.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.5.0
Redhat » Automatic Bug Reporting Tool » Version: 2.5.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.5.1
Redhat » Automatic Bug Reporting Tool » Version: 2.6.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.6.0
Redhat » Automatic Bug Reporting Tool » Version: 2.6.1

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.6.1
Redhat » Automatic Bug Reporting Tool » Version: 2.6.2

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.6.2
Redhat » Automatic Bug Reporting Tool » Version: 2.6.3

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.6.3
Redhat » Automatic Bug Reporting Tool » Version: 2.7.0

cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.7.0
Oracle » Linux » Version: 7

cpe:2.3:o:oracle:linux:7
Redhat » Enterprise Linux » Version: 6.0

cpe:2.3:o:redhat:enterprise_linux:6.0
Redhat » Enterprise Linux » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux:7.0
Redhat » Enterprise Linux Desktop » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0
Redhat » Enterprise Linux Hpc Node » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_hpc_node:7.0
Redhat » Enterprise Linux Server » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_server:7.0
Redhat » Enterprise Linux Workstation » Version: 7.0

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-5287

Products

Pricing

Contact Us