Apport CVE-2015-1318 Local Privilege Escalation Vulnerability
BID:74160
Info
Apport CVE-2015-1318 Local Privilege Escalation Vulnerability
| Bugtraq ID: | 74160 |
| Class: | Race Condition Error |
| CVE: |
CVE-2015-1318 |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 15 2015 12:00AM |
| Updated: | May 12 2015 07:38PM |
| Credit: | Tavis Ormandy |
| Vulnerable: |
Ubuntu Ubuntu Linux 14.10 Ubuntu Ubuntu Linux 14.04 LTS Martin Pitt Apport 2.17 Martin Pitt Apport 2.13 |
| Not Vulnerable: |
Martin Pitt Apport 2.17.1 |
Discussion
Apport CVE-2015-1318 Local Privilege Escalation Vulnerability
Apport is prone to a local privilege-escalation vulnerability.
Note: This issue was previously titled 'Apport and Abrt CVE-2015-1318 Local Privilege Escalation Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.
A local attacker can exploit this vulnerability to gain root privileges.
Apport is prone to a local privilege-escalation vulnerability.
Note: This issue was previously titled 'Apport and Abrt CVE-2015-1318 Local Privilege Escalation Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.
A local attacker can exploit this vulnerability to gain root privileges.
Exploit / POC
Apport CVE-2015-1318 Local Privilege Escalation Vulnerability
An attacker uses readily available commands to exploit the issue.
An attacker uses readily available commands to exploit the issue.
Solution / Fix
Apport CVE-2015-1318 Local Privilege Escalation Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].