CVE-2013-4288

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

CVE-2013-4288: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

CVE-2013-1061: Undefined Security Weakness

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProce...

PT-2013-1180

Name of the Vulnerable Software and Affected Versions polkit versions 0.96 hplip versions prior to 3.14.1 Description The issue allows local users to bypass intended restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to the...

Fedora Update for dbus-glib FEDORA-2013-12199

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12199 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for dbus-glib FEDORA-2013-12199

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dbus-glib FEDORA-2013-12156

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12156 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for dbus-glib FEDORA-2013-12156

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 18 : dbus-glib-0.100-3.fc18 (2013-12156)

This update fixes : - Bug 911714 - CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 19 : dbus-glib-0.100-5.fc19 (2013-12199)

This update fixes : - Bug 911714 - CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 18 : dbus-1.6.12-1.fc18 (2013-11198)

Not tested locally yet, I need to spin back up a Fedora 18 VM. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...

Oracle Linux 5 : dbus (ELSA-2009-0008)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2009-0008 advisory. - CVE-2008-3834 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has not tested for this...

Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory. - Merge changes from RHEL-6 branch: Drop default patch fuzz Merge CVE-2010-4352.patch from RHEL-60-Z - Apply patches for CVE-2011-2200 Tenable has extracted...

Oracle Linux 5 : dbus-glib (ELSA-2010-0616)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0616 advisory. - Rebuild to fix D-Bus property access for dbus-glib CVE-2010-1172 dbus-glib: Tenable has extracted the preceding description block directly from the Oracle Lin...

Oracle Linux 5 / 6 : dbus-glib (ELSA-2013-0568)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-0568 advisory. - Add patch to fix CVE-2013-0292 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus ha...

Oracle Linux 4 : dbus (ELSA-2007-0008)

From Red Hat Security Advisory 2007:0008 : Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...

Oracle Linux 5 / 6 : dbus (ELSA-2011-0376)

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0376 advisory. - Apply patch for CVE-2010-4352 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has...

Fedora 19 : dbus-1.6.12-1.fc19 (2013-11142)

I tested locally by just booting; the fix itself is low risk, but this includes a new upstream version rebase. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

Slackware 14.0 / current : dbus (SSA:2013-191-01)

New dbus packages are available for Slackware 14.0, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-191-01. The text itself is copyright C Slackwa...

[slackware-security] dbus

New dbus packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/dbus-1.4.20-i486-4slack14.0.txz: Rebuilt. This update fixes a security issue where misuse of valist could be used to cause a denial of...