openSUSE Security Update : gdm (openSUSE-SU-2010:0968-1)

dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. Additionally a bug that prevented XDMCP connections was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : NetworkManager (openSUSE-SU-2012:1151-1)

The broken AdHoc WPA mode was disabled in NetworkManager, which would have created an open network instead. CVE-2012-2736 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-589. The...

openSUSE Security Update : pidgin (openSUSE-2012-29)

pidgin was updated to version 2.10.1 + AIM and ICQ : - Fix remotely-triggerable crashes by validating strings in a few messages related to buddy list management bnc736147, CVE-2011-4601. + Bonjour : - IPv6 fixes + Gadu-Gadu : - Fix problems linking against GnuTLS. + IRC : - Fix a memory leak when...

openSUSE Security Update : dbus-1-glib (openSUSE-SU-2011:0300-1)

dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-glib-4237. The text description of...

dbus-glib pam_fprintd - Local Privilege Escalation

/ darklena. fprintd/pamfprintd local root PoC. However dbus-glib plays an important role. C 2013 Sebastian Krahmer, all rights reversed. pamfprintd uses net.reactivated.Fprint service to trigger finger swiping and registers DBUS signal inside the PAM authentication function: dbusgproxyaddsignalde...

GLSA-201406-01 : D-Bus, GLib: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-201406-01 D-Bus, GLib: Privilege escalation When libdbus is used in a setuid program, a user can gain escalated privileges by leveraging the DBUSSYSTEMBUSADDRESS variable. GLib can be used in a setuid context with D-Bus, and so ca...

dbus-glib pam_fprintd - Local Privilege Escalation

dbus-glib pamfprintd - Local Privilege Escalation / darklena. fprintd/pamfprintd local root PoC. However dbus-glib plays an important role. C 2013 Sebastian Krahmer, all rights reversed. pamfprintd uses net.reactivated.Fprint service to trigger finger swiping and registers DBUS signal inside the...

D-Bus, GLib: Privilege escalation

Background D-Bus is a daemon providing a framework for applications to communicate with one another. GLib is a library providing a number of GNOME’s core objects and functions. Description When libdbus is used in a setuid program, a user can gain escalated privileges by leveraging the...

FreeBSD : dbus-glib -- privledge escalation (77bb0541-c1aa-11e3-a5ac-001b21614864)

Sebastian Krahmer reports : A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop, performed filtering of the message sender message source subject, when the NameOwnerChanged sign...

DEBIAN-CVE-2013-1913

Integer overflow in the loadimage function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large color entries value in an X Window Syste...

gimp: xwd plugin g_new() integer overflow

Integer overflow in the loadimage function in file-xwd.c in the X Window Dump XWD plug-in in GIMP 2.6.9 and earlier, when used with glib before 2.24, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large color entries value in an X Window Syste...

CentOS Update for spice-glib CESA-2013:1273 centos6

Check for the Version of spice-glib OpenVAS Vulnerability Test CentOS Update for spice-glib CESA-2013:1273 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

CentOS Update for spice-glib CESA-2013:1273 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dbus-glib FEDORA-2013-12199

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for dbus-glib FEDORA-2013-12199

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12199 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for dbus-glib FEDORA-2013-12156

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12156 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for dbus-glib FEDORA-2013-12156

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 19 : zeroinstall-injector-2.3-1.fc19 (2013-12414)

Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...

Fedora 17 : zeroinstall-injector-2.3-1.fc17 (2013-12421)

Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...

Fedora 18 : dbus-glib-0.100-3.fc18 (2013-12156)

This update fixes : - Bug 911714 - CVE-2013-0292 dbus-glib: Local privilege escalation due improper filtering of message sender when NameOwnerChanged signal received fedora-all Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...