Every CVE Search/ Get API key

CVE-2012-5659

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in...

3.7 Low

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Exploit likelihood

0.45%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 3.7

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Record
CVE-2012-5659
CVSS 2.0
3.7 LowAV:L/AC:H/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Record
CVE-2012-5659
Updated
2026-11-02
EUVDEUVD-2012-5542 No score

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Record
EUVD-2012-5542
Updated
2026-11-03
GitHub AdvisoriesGHSA-p65h-g398-8mm3 No score

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in...

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Record
GHSA-p65h-g398-8mm3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
abrt
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-ccpp
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-python
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-desktop
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-gui
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-libs
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-tui
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
Show 94 moreShow less
Affected packages
PackageAffectedFixed
libreport
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-newt
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-logger
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-mailx
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-python
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt-addon-vmcore
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-ccpp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-python
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-libs
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-tui
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-logger
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-mailx
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-python
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt-addon-vmcore
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-desktop
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-gui
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-newt
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-ccpp
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-python
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-desktop
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-gui
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-libs
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-tui
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-newt
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-logger
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-mailx
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-python
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt-addon-vmcore
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-ccpp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-kerneloops
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-addon-python
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-desktop
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-gui
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-libs
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-tui
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-newt
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-kerneloops
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-logger
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-mailx
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-reportuploader
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-rhtsupport
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-python
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
abrt-addon-vmcore
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
abrt-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.8-6.el6_3.2
0:2.0.8-6.el6_3.2
libreport-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-gtk-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2
libreport-plugin-bugzilla
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:2.0.9-5.el6_3.2
0:2.0.9-5.el6_3.2

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-5659 is a low vulnerability (CVSS 3.7) in Redhat Automatic Bug Reporting Tool, published March 12, 2013. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 38th percentile. No source names a fixed version.

References

Show 8 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open