CVE-2012-5660: abrt-action-install-debuginfo in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users t...

Security readout for executives and security teams

This is a local privilege-risk issue in ABRT 2.0.9 and earlier. A user who already has local access may be able to abuse crash-report storage handling so arbitrary files become world-writable, creating a possible path to higher privileges. Exposure is most likely on Linux systems running ABRT 2.0.9 or earlier, particularly environments following the Red Hat/Fedora advisory trail. The source bundle does not provide complete product or version matrices beyond ABRT 2.0.9 and earlier. Treat this as a contained but meaningful local privilege-escalation risk. It is not described as remotely exploitable, but affected multi-user systems should be patched because local access can become broader system compromise. Mitigation focus: Identify systems running ABRT 2.0.9 or earlier.; Apply vendor updates referenced by RHSA-2013:0215 where applicable.; Review Red Hat Bugzilla and vendor guidance for package-specific remediation..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.