CVE-2012-1106

Name of the Vulnerable Software and Affected Versions ABRT versions 2.0.8 and earlier

Description The issue is related to the C handler plug-in in ABRT, which does not properly set group permissions on core dump files for setuid programs when the sysctl fs.suid dumpable option is set to 2. This allows local users to obtain sensitive information.

Recommendations For ABRT versions 2.0.8 and earlier, consider restricting access to core dump files until a proper fix is applied, to minimize the risk of sensitive information disclosure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.