Lucene search

K
cveRedhatCVE-2012-5659
HistoryMar 12, 2013 - 11:55 p.m.

CVE-2012-5659

2013-03-1223:55:01
redhat
web.nvd.nist.gov
29
cve-2012-5659
untrusted search path
abrt
vulnerability
python
nvd

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Affected configurations

Nvd
Node
redhatautomatic_bug_reporting_toolRange2.0.9
OR
redhatautomatic_bug_reporting_toolMatch2.0.0
OR
redhatautomatic_bug_reporting_toolMatch2.0.1
OR
redhatautomatic_bug_reporting_toolMatch2.0.2
OR
redhatautomatic_bug_reporting_toolMatch2.0.3
OR
redhatautomatic_bug_reporting_toolMatch2.0.4
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.980
OR
redhatautomatic_bug_reporting_toolMatch2.0.4.981
OR
redhatautomatic_bug_reporting_toolMatch2.0.5
OR
redhatautomatic_bug_reporting_toolMatch2.0.6
OR
redhatautomatic_bug_reporting_toolMatch2.0.7
OR
redhatautomatic_bug_reporting_toolMatch2.0.8
VendorProductVersionCPE
redhatautomatic_bug_reporting_tool*cpe:2.3:a:redhat:automatic_bug_reporting_tool:*:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.0cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.0:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.1cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.1:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.2cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.2:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.3cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.3:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.4cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.4.980cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4.980:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.4.981cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.4.981:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.5cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.5:*:*:*:*:*:*:*
redhatautomatic_bug_reporting_tool2.0.6cpe:2.3:a:redhat:automatic_bug_reporting_tool:2.0.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

6.6

Confidence

Low

EPSS

0

Percentile

5.1%