CVE-2015-3150

abrt-dbus in Automatic Bug Reporting Tool (ABRT) allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the (1) ChownProblemDir, (2) DeleteElement, or (3) DeleteProblem method.

• CWE-20

• https://bugzilla.redhat.com/show_bug.cgi?id=1214457Issue Tracking, Third Party Advisory
• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7Patch, Third Party Advisory
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75Patch, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1214457Issue Tracking, Third Party Advisory
• https://github.com/abrt/abrt/commit/6e811d78e2719988ae291181f5b133af32ce62d8Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/7814554e0827ece778ca88fd90832bd4d05520b1Patch, Third Party Advisory
• https://github.com/abrt/abrt/commit/b7f8bd20b7fb5b72f003ae3fa647c1d75f4218b7Patch, Third Party Advisory
• https://github.com/abrt/libreport/commit/1951e7282043dfe1268d492aea056b554baedb75Patch, Third Party Advisory

Published

Jan 14, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3144The fix_hostname function in cURL and libcurl 7.37.0 through…
• CVE-2015-3145The sanitize_cookie_path function in cURL and libcurl 7.31.0…
• CVE-2015-3146The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet h…
• CVE-2015-3147daemon/abrt-handle-upload.in in Automatic Bug Reporting Tool…6.5
• CVE-2015-3148cURL and libcurl 7.10.6 through 7.41.0 do not properly re-us…
• CVE-2015-3149The Hotspot component in OpenJDK8 as packaged in Red Hat Ent…
• CVE-2015-3151Directory traversal vulnerability in abrt-dbus in Automatic …7.8
• CVE-2015-3152Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka lib…5.9
• CVE-2015-3153The default configuration for cURL and libcurl before 7.42.1…
• CVE-2015-3154CRLF injection vulnerability in Zend\Mail (Zend_Mail) in Zen…6.1
• CVE-2015-3155Foreman before 1.8.1 does not set the secure flag for the _s…
• CVE-2015-3156The _write_config function in trove/guestagent/datastore/exp…