CVE-2009-1295: Apport

Low severity, CVSS 1.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Apport before 0.108.4 on Ubuntu 8.04 LTS, before 0.119.2 on Ubuntu 8.10, and before 1.0-0ubuntu5.2 on Ubuntu 9.04 does not properly remove files from the application's crash-report directory, which allows local users to delete arbitrary files via unspecified vectors.

Affected products

• Apport Apport: up to and including 0.1.0.8.1
• Ubuntu Ubuntu: version 8.0.4_lts only; version 8.1.0 only; version 9.0.4 only

Published 2009-04-30. Last modified 2026-06-16.