CVE Vulnerabilities

CVE-2009-1295

Published: Apr 30, 2009 | Modified: May 15, 2009
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
1.9 LOW
AV:L/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the applications crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.

Affected Software

Name Vendor Start Version End Version
Apport Apport * 0.1.0.8.1 (including)
Ubuntu Ubuntu 8.0.4_lts (including) 8.0.4_lts (including)
Ubuntu Ubuntu 8.1.0 (including) 8.1.0 (including)
Ubuntu Ubuntu 9.0.4 (including) 9.0.4 (including)

References