The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Metrics
Affected Vendors & Products
References
History
Wed, 26 Aug 2026 20:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Oracle
Oracle linux |
|
| CPEs | cpe:2.3:o:oracle:linux:7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle linux |
Wed, 26 Aug 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
cvssV3_1
|
Wed, 26 Aug 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
kev
|
Status: PUBLISHED
Assigner: redhat
Published: 2015-12-07T18:00:00.000Z
Updated: 2026-08-27T03:56:39.465Z
Reserved: 2015-07-01T00:00:00.000Z
Link: CVE-2015-5287
Updated: 2024-08-06T06:41:09.524Z
Status : Analyzed
Published: 2015-12-07T18:59:02.230
Modified: 2026-08-27T04:16:38.280
Link: CVE-2015-5287