Lucene search

K
archlinuxArch LinuxASA-201601-30
HistoryJan 25, 2016 - 12:00 a.m.

blueman: privilege escalation

2016-01-2500:00:00
Arch Linux
lists.archlinux.org
22

EPSS

0.005

Percentile

76.7%

A local privilege escalation vulnerability has been found in the
Network::EnableNetwork() method of blueman. An unsanitized string is
received over DBUS into the dhcp_handler parameter and passed to eval(),
thus allowing arbitrary command execution with the privileges of the
user running blueman.

OSVersionArchitecturePackageVersionFilename
anyanyanyblueman< 2.0.3-1UNKNOWN