CVE-2012-5660
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows...
CVE-2012-5660 is a medium vulnerability (CVSS 6.9) in Redhat Automatic Bug Reporting Tool, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. Fixed in abrt 0:2.0.8-6.el6_3.2.
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
Exploit likelihood
What each source reports
NVD Score used
6.9
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
- Record
CVE-2012-5660- CVSS 2.0
- 6.9 Medium
AV:L/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-264, CWE-362
- Updated
- 2026-11-02
CVE List No score
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
- Record
CVE-2012-5660- Updated
- 2026-11-02
EUVDEUVD-2012-5543 No score
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
- Record
EUVD-2012-5543- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2x9c-9952-j585 No score
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows...
abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to set world-writable permissions for arbitrary files and possibly gain privileges via a symlink attack on "the directories used to store information about crashes."
- Record
GHSA-2x9c-9952-j585- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
abrtRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
Show 94 moreShow less
| Package | Affected | Fixed |
|---|---|---|
libreportRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::client |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::client |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::computenode |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::computenode |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::server |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::server |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrtRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-ccppRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-kerneloopsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-addon-pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-cliRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-desktopRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-guiRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-libsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-tuiRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreportRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-cliRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-debuginfoRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtkRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-newtRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-kerneloopsRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-loggerRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-mailxRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-reportuploaderRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-rhtsupportRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-pythonRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
abrt-addon-vmcoreRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
abrt-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.8-6.el6_3.2 | 0:2.0.8-6.el6_3.2 |
libreport-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-gtk-develRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
libreport-plugin-bugzillaRed Hat:enterprise_linux:6::workstation |
before 0:2.0.9-5.el6_3.2 | 0:2.0.9-5.el6_3.2 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
rhn.redhat.com/errata/RHSA-2013-0215.html
bugzilla.redhat.com/show_bug.cgi?id=887866
git.fedorahosted.org/cgit/libreport.git/commit?id=3bbf961b1884dd32654dd39b360dd78ef294b10a
nvd.nist.gov/vuln/detail/CVE-2012-5660
access.redhat.com/errata/RHSA-2013:0215
access.redhat.com/security/cve/CVE-2012-5660
Show 8 moreShow less
github.com/advisories/GHSA-2x9c-9952-j585
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=854011
security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0215.json
access.redhat.com/security/cve/CVE-2012-5659
cve.org/CVERecord?id=CVE-2012-5659
nvd.nist.gov/vuln/detail/CVE-2012-5659
cve.org/CVERecord?id=CVE-2012-5660