CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: the abrt-hook-ccpp help program in automatic bug reporting tool (abrt) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2015-12-07
Last Modified Date: 2016-12-07