Mandriva Linux Security Advisory : dbus (MDVSA-2014:148)

Updated dbus packages fix security vulnerabilities : A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause a service or application to disconnect from the bus, typically resulting in that service or application exiting CVE-2014-3532. A flaw...

MGASA-2014-0294 Updated dbus packages fix multiple vulnerabilities

Updated dbus packages fix security vulnerabilities: A flaw was reported in D-Bus's file descriptor passing feature. A local attacker could use this flaw to cause a service or application to disconnect from the bus, typically resulting in that service or application exiting CVE-2014-3532. A flaw w...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:0926-1)

CVE-2014-3532 CVE-2014-3533 bnc885241 fdo80163 fdo79694 fdo80469 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-465. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:0921-1)

CVE-2014-3532 denial of service in file descriptor passing feature CVE-2014-3533 local denial of service force system services to exit %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2014-3532

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...

CVE-2014-3532

dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service system-bus disconnect of other services or applications by sending a message containing a file descriptor, then exceeding the maximum recursion depth before...

CVE-2014-3532

dbus CVE-2014-3532 affects dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 when run on Linux 2.6.37-rc4 or later. The flaw lets local attackers cause a denial of service by sending a message containing a file descriptor and then exceeding the maximum recursion depth before the initial message is ...

Fedora Update for dbus FEDORA-2014-8059

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : DBus vulnerabilities (USN-2275-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2275-1 advisory. Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local us...

USN-2275-1: DBus vulnerabilities

Alban Crequy discovered that dbus-daemon incorrectly sent AccessDenied errors to the service instead of the client when enforcing permissions. A local user can use this issue to possibly deny access to the service. CVE-2014-3477 Alban Crequy discovered that dbus-daemon incorrectly handled certain...

Fedora 20 : dbus-1.6.12-9.fc20 (2014-8059)

Backport patches from dbus-1.6 - Fixes CVE-2014-3477 fd.o78979 - Fixes CVE-2014-3532 fd.o80163 - Fixes CVE-2014-3533 fd.o80469 - Resolves 1115636 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Debian DSA-2971-1 : dbus - security update

Several vulnerabilities have been discovered in dbus, an asynchronous inter-process communication system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2014-3477 Alban Crequy at Collabora Ltd. discovered that dbus-daemon sends an AccessDenied error to...

[SECURITY] [DSA 2971-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2971-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 02, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2971-1] dbus security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2971-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso July 02, 2014 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2971-1 (dbus - security update)

Several vulnerabilities have been discovered in dbus, an asynchronous inter-process communication system. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-3477 Alban Crequy at Collabora Ltd. discovered that dbus-daemon sends an AccessDenied error to the...

CVE-2013-3532

CVE-2013-3532 describes an SQL injection in the Web Dorado Spider Video Player (SpiderVPlayer) WordPress plugin, version 2.1, exposed via the settings.php theme parameter. The root cause is unparameterized SQL handling, permitting remote attackers to execute arbitrary SQL commands. Impact per sou...

CVE-2013-3532

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter...

CVE-2012-3532

CVE-2012-3532 is a CSRF vulnerability in the GateIn Portal component of JBoss Enterprise Portal Platform 5.2.2 and earlier. The issue could allow remote attackers to hijack the authentication of unspecified victims via unknown vectors, with potential partial confidentiality, integrity, and availa...

CVE-2012-3532

Cross-site request forgery CSRF vulnerability in the GateIn Portal component in JBoss Enterprise Portal Platform 5.2.2 and earlier allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-3532

creationtimestamp| type| source ---|---|--- 2013-04-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38458...