The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2015-1210 advisory.

  - The default event handling scripts in Automatic Bug Reporting Tool (ABRT) allow local users to gain     privileges as demonstrated by a symlink attack on a var_log_messages file. (CVE-2015-1869)

  - The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of     sosreport file in problem directories, which allows local users to obtain sensitive information from     /var/log/messages via unspecified vectors. (CVE-2015-1870)

  - The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the     ownership of files before writing core dumps to them, which allows local users to obtain sensitive     information by leveraging write permissions to the working directory of a crashed application.
    (CVE-2015-3142)

  - daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool (ABRT), when moving problem reports from     /var/spool/abrt-upload, allows local users to write to arbitrary files or possibly have other unspecified     impact via a symlink attack on (1) /var/spool/abrt or (2) /var/tmp/abrt. (CVE-2015-3147)

  - The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) does     not properly handle the process environment before invoking abrt-action-install-debuginfo, which allows     local users to gain privileges. (CVE-2015-3159)

  - Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other     unspecified impact on arbitrary files via a symlink attack on (1) /var/tmp/abrt/*/maps, (2)     /tmp/jvm-*/hs_error.log, (3) /proc/*/exe, (4) /etc/os-release in a chroot, or (5) an unspecified root     directory related to librpm. (CVE-2015-3315)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Oracle Linux 6 : abrt (ELSA-2015-1210)

high Nessus Plugin ID 84608

Version 2.13

Version 2.12

Version 2.13 Jan 16, 2024, 8:55 PM CVSSv2 score source (set to "CVE-2015-3315") Detection (updated detection logic) Plugin metadata Plugin Feed: 202401162055
Version 2.12 Jan 16, 2024, 5:39 PM CVSSv2 score source (set to "CVE-2015-3315") Detection (updated detection logic) Plugin metadata Plugin Feed: 202401161739