CVE-2015-5287

MEDIUM6.9Published on December 7, 2015

The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by /var/tmp/abrt/abrt-hax-coredump or /var/spool/abrt/abrt-hax-coredump.

Early warning: exploitation observed

Exploitation observed since Aug 20, 2026
Not yet in the official CISA catalogue
First attack observed 3908 days after disclosure

Source: VulnCheck KEV · Aug 20, 2026

CVSS score6.9 / 10AV:L/AC:M/Au:N/C:C/I:C/A:C

Weakness type (CWE)CWE-59

Vendorsredhat

Affected products

Vendors	Prodotto	Versioni
redhat	automatic bug reporting tool	<= 2.7.0
redhat	enterprise linux desktop	7.0
redhat	enterprise linux hpc node	7.0
redhat	enterprise linux server	7.0
redhat	enterprise linux workstation	7.0

SPECTRE, la backdoor che spegne gli EDR: dentro l’arsenale di UAT-10147

APT

SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal

Recently, Cisco Talos published a two-part analysis of the Chinese-speaking group UAT-10147 , which is active against Windows and Linux web servers on a

Aug 24, 20267 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Early warning: exploitation observed

Affected products

Related articles

SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal