VIR Vulnerability Intelligence Relay

CVE-2012-5659

low
Published 2013-03-12 · Modified 2026-04-29
CVSS v3
—
CVSS v2
3.7
VIR risk
3.7

Description

Untrusted search path vulnerability in plugins/abrt-action-install-debuginfo-to-abrt-cache.c in Automatic Bug Reporting Tool (ABRT) 2.0.9 and earlier allows local users to load and execute arbitrary Python modules by modifying the PYTHONPATH environment variable to reference a malicious Python module.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert@redhat.com — http://git.fedorahosted.org/cgit/abrt.git/commit/?id=b173d81b577953b96a282167c7eecd66bf111a4f

Application impact
VendorProductVersionsFixed
redhatautomatic_bug_reporting_tool{"endIncluding":"2.0.9"}
redhatautomatic_bug_reporting_tool2.0.0
redhatautomatic_bug_reporting_tool2.0.1
redhatautomatic_bug_reporting_tool2.0.2
redhatautomatic_bug_reporting_tool2.0.3
redhatautomatic_bug_reporting_tool2.0.4
redhatautomatic_bug_reporting_tool2.0.4.980
redhatautomatic_bug_reporting_tool2.0.4.981
redhatautomatic_bug_reporting_tool2.0.5
redhatautomatic_bug_reporting_tool2.0.6
redhatautomatic_bug_reporting_tool2.0.7
redhatautomatic_bug_reporting_tool2.0.8

References

Verify integrity in audit chain (admin only). AS-IS.