CVE-2012-1106

Description

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/76524

http://www.securityfocus.com/bid/54121

http://rhn.redhat.com/errata/RHSA-2012-0841.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3