EDB-36747
functionalAbrt (Fedora 21) - Race Condition
view exploit source exploit_dbverifiedtype localauthor Tavis Ormandypublished 2015-04-14catalog exploit_db
01
exploited CVEs (2)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-1862US | high7.0 | Exploit | ||
The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specified directory in a namedspaced environmen… | ||||
| CVE-2015-3315US | high7.8 | Exploit | ||
Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/ab… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan