CVE-2012-5659

CVE Details

Release Date:

2013-01-30

Description

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

See more information about CVE-2012-5659 from MITRE CVE dictionary and NIST NVD

CVSS v2.0 metrics

NOTE: The following CVSS v2.0 metrics and score provided are preliminary and subject to review.

Base Score:	3.7	Base Metrics:	AV:L/AC:H/Au:N/C:P/I:P/A:P
Access Vector:	Local network	Attack Complexity:	High
Authentication:	None required	Confidentiality Impact:	Partial
Integrity Impact:	Partial	Availability Impact:	Partial

Errata information

Platform	Errata	Release Date
Oracle Linux version 6 (abrt)	ELSA-2013-0215	2013-01-31
Oracle Linux version 6 (libreport)	ELSA-2013-0215	2013-01-31

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team