blueman: privilege escalation

A local privilege escalation vulnerability has been found in the Network::EnableNetwork method of blueman. An unsanitized string is received over DBUS into the dhcphandler parameter and passed to eval, thus allowing arbitrary command execution with the privileges of the user running blueman...

CVE-2015-8612

The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...

CVE-2015-8612

The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...

PT-2016-3934

Name of the Vulnerable Software and Affected Versions Blueman versions prior to 2.0.3 Description The issue allows local users to gain privileges. It is related to the EnableNetwork method in the Network class. The dhcp handler argument is involved in the issue. Recommendations For versions prior...