91 matches found
blueman - set_dhcp_handler D-Bus Privilege Escalation Exploit
Exploit for linux platform in category local exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts...
blueman set_dhcp_handler D-Bus Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a Python code...
blueman - set_dhcp_handler D-Bus Privilege Escalation (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'blueman setdhcphandler D-Bus Privilege Escalation', 'Description' = %q This module attempts to gain root privileges by exploiting a Python code...
blueman set_dhcp_handler D-Bus Privilege Escalation
This module attempts to gain root privileges by exploiting a Python code injection vulnerability in blueman versions prior to 2.0.3. The org.blueman.Mechanism.EnableNetwork D-Bus interface exposes the setdhcphandler function which uses user input in a call to eval, without sanitization, resulting...
Updated blueman packages fix security vulnerability
Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...
MGASA-2018-0414 Updated blueman packages fix security vulnerability
Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...
Security update for blueman (moderate)
This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authenticatio...
openSUSE Security Update : blueman (openSUSE-2018-855)
This update for blueman fixes the following issues : The following security issue was addressed : - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without...
openSUSE: Security Advisory for blueman (openSUSE-SU-2018:2290-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[slackware-security] blueman
New blueman packages are available for Slackware 14.2 and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/blueman-2.0.6-i586-1slack14.2.txz: Upgraded. This update fixes an issue where blueman-mechanism did not enforce the polkit action...
Slackware 14.2 / current : blueman (SSA:2018-213-01)
New blueman packages are available for Slackware 14.2 and -current to fix a security issue. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2018-213-01. The text itself is copyright C Slackware Linux, Inc...
blueman: privilege escalation
A local privilege escalation vulnerability has been found in the Network::EnableNetwork method of blueman. An unsanitized string is received over DBUS into the dhcphandler parameter and passed to eval, thus allowing arbitrary command execution with the privileges of the user running blueman...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
DEBIAN-CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
Design/Logic Flaw
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
CVE-2015-8612 affects Blueman up to version 2.0.3, where the EnableNetwork() method in the D-Bus interface allows an attacker with local access to escalate privileges via the dhcp_handler argument. The root cause is input unsanitization in a call to eval() on user-provided data, enabling arbitrar...
