CVE-2013-1067 - Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file

Back Back to CVE browser

MEDIUM

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file

Published Oct 25, 2013

4.9

MEDIUM

CVSS 2.0

EPSS 0.40%

Description

Apport 2.12.5 and earlier uses weak permissions for core dump files created by setuid binaries, which allows local users to obtain sensitive information by reading the file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (1)

http://www.ubuntu.com/usn/USN-2007-1
vendor-advisoryx_refsource_UBUNTUVendor Advisory

Link	Providers	Tags
http://www.ubuntu.com/usn/USN-2007-1		vendor-advisoryx_refsource_UBUNTUVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner canonical

Published Oct 25, 2013

Updated Sep 16, 2024

Reserved Jan 11, 2013

Link CVE-2013-1067

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2013-1067

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-1067