CVE-2009-1295

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.

🔗 References (16)

• security@ubuntuhttp://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• security@ubuntuhttp://secunia.com/advisories/34947
• security@ubuntuhttp://secunia.com/advisories/34952
• security@ubuntuhttp://secunia.com/advisories/35065
• security@ubuntuhttp://www.securityfocus.com/bid/34776
• security@ubuntuhttp://www.ubuntu.com/usn/usn-768-1
• security@ubuntuhttps://bugs.launchpad.net/bugs/357024
• security@ubuntuhttps://launchpad.net/bugs/cve/2009-1295
• af854a3a-2127-422b-91ae-364da2661108http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34947
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34952
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35065
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/34776
• af854a3a-2127-422b-91ae-364da2661108http://www.ubuntu.com/usn/usn-768-1
• af854a3a-2127-422b-91ae-364da2661108https://bugs.launchpad.net/bugs/357024