Every CVE Search/ Get API key

CVE-2012-1106

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does...

1.9 LowFix available

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Exploit likelihood

0.44%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 1.9

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Record
CVE-2012-1106
CVSS 2.0
1.9 LowAV:L/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-264
Updated
2026-11-02
CVE List No score

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Record
CVE-2012-1106
Updated
2026-11-02
EUVDEUVD-2012-1140 No score

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Record
EUVD-2012-1140
Updated
2026-11-03
GitHub AdvisoriesGHSA-rph2-33pr-67ww No score

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does...

The C handler plug-in in Automatic Bug Reporting Tool (ABRT), possibly 2.0.8 and earlier, does not properly set the group (GID) permissions on core dump files for setuid programs when the sysctl fs.suid_dumpable option is set to 2, which allows local users to obtain sensitive information.

Record
GHSA-rph2-33pr-67ww
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
abrt
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-vmcore
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-devel
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
btparser
Red Hat:enterprise_linux:6::client
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-devel
Red Hat:enterprise_linux:6::client
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-python
Red Hat:enterprise_linux:6::client
 before 0:0.16-3.el6
0:0.16-3.el6
libreport
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
Show 114 moreShow less
Affected packages
PackageAffectedFixed
libreport-devel
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk-devel
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
abrt-addon-ccpp
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-python
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-cli
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-desktop
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-gui
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-libs
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-tui
Red Hat:enterprise_linux:6::client
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
libreport-cli
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-newt
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-logger
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-mailx
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-python
Red Hat:enterprise_linux:6::client
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
python-meh
Red Hat:enterprise_linux:6::client
 before 0:0.12.1-3.el6
0:0.12.1-3.el6
abrt
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-vmcore
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-desktop
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-gui
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
btparser
Red Hat:enterprise_linux:6::computenode
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-devel
Red Hat:enterprise_linux:6::computenode
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-python
Red Hat:enterprise_linux:6::computenode
 before 0:0.16-3.el6
0:0.16-3.el6
libreport
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-newt
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
python-meh
Red Hat:enterprise_linux:6::computenode
 before 0:0.12.1-3.el6
0:0.12.1-3.el6
abrt-addon-ccpp
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-python
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-cli
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-libs
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-tui
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
libreport-cli
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-logger
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-mailx
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-python
Red Hat:enterprise_linux:6::computenode
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
abrt
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-vmcore
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-devel
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
btparser
Red Hat:enterprise_linux:6::server
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-devel
Red Hat:enterprise_linux:6::server
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-python
Red Hat:enterprise_linux:6::server
 before 0:0.16-3.el6
0:0.16-3.el6
libreport
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-devel
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk-devel
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
abrt-addon-ccpp
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-python
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-cli
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-desktop
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-gui
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-libs
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-tui
Red Hat:enterprise_linux:6::server
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
libreport-cli
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-newt
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-logger
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-mailx
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-python
Red Hat:enterprise_linux:6::server
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
python-meh
Red Hat:enterprise_linux:6::server
 before 0:0.12.1-3.el6
0:0.12.1-3.el6
abrt
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-vmcore
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
btparser
Red Hat:enterprise_linux:6::workstation
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-devel
Red Hat:enterprise_linux:6::workstation
 before 0:0.16-3.el6
0:0.16-3.el6
btparser-python
Red Hat:enterprise_linux:6::workstation
 before 0:0.16-3.el6
0:0.16-3.el6
libreport
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
abrt-addon-ccpp
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-addon-python
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-cli
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-desktop
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-gui
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-libs
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
abrt-tui
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.8-6.el6
0:2.0.8-6.el6
libreport-cli
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-gtk
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-newt
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-logger
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-mailx
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
libreport-python
Red Hat:enterprise_linux:6::workstation
 before 0:2.0.9-5.el6
0:2.0.9-5.el6
python-meh
Red Hat:enterprise_linux:6::workstation
 before 0:0.12.1-3.el6
0:0.12.1-3.el6

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-1106 is a low vulnerability (CVSS 1.9) in Redhat Automatic Bug Reporting Tool, published July 3, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.44%, the 38th percentile. Fixed in abrt 0:2.0.8-6.el6.

References

Show 31 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open