Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Apport: arbitrary file removal

Package(s):

Apport

CVE #(s):

CVE-2009-1295

Created:

April 30, 2009

Updated:

May 13, 2009

Description:

From the Ubuntu alert: Stephane Chazelas discovered that Apport did not safely remove files from its crash report directory. If Apport had been enabled at some point, a local attacker could remove arbitrary files from the system.

Alerts:

SuSE	SUSE-SR:2009:010	2009-05-12
Ubuntu	USN-768-1	2009-04-29

(Log in to post comments)