Description
Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.
References
- USN-2007-1 vendor-advisory
Unscored
CVE-2013-1067
EUVD-2013-1107GHSA-8pvv-m49q-jr79
Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitiv…
Published Oct 25, 2013 · Updated Sep 16, 2024 · Assigned by canonical