CVE-2009-1295

Common Vulnerabilities and Exposures

CVE-2009-1295 at MITRE

Details

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.

Novell Bugzilla entry: 495053

SUSE Security Advisories:

SUSE-SR:2009:010 , published Tue, 12 May 2009 08:00:00 +0000

Product(s)	Fixed package version(s)	References
openSUSE 11.1	`apport >= 0.114-8.6.1` `apport-crashdb-opensuse >= 0.114-8.6.1` `apport-gtk >= 0.114-8.6.1` `apport-qt >= 0.114-8.6.1` `apport-retrace >= 0.114-8.6.1`	SAT Patch Nr: 816