100 matches found
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
Design/Logic Flaw
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
CVE-2015-8612
CVE-2015-8612 affects Blueman up to version 2.0.3, where the EnableNetwork() method in the D-Bus interface allows an attacker with local access to escalate privileges via the dhcp_handler argument. The root cause is input unsanitization in a call to eval() on user-provided data, enabling arbitrar...
CVE-2015-8612: Undefined Security Weakness
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcphandler argument...
Blueman Remote Privilege Vulnerability
Blueman is a Bluetooth manager. Blueman suffers from a remote elevation of privileges vulnerability. A remote attacker can exploit this vulnerability to gain elevated privileges...
Slackware 13.37 / 14.0 / 14.1 / current : blueman (SSA:2015-356-01)
New blueman packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-356-01. The text itself is...
Mageia: Security Advisory (MGASA-2015-0491)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2015-0491 Updated blueman packages fix security vulnerability
Privilege escalation vulnerability in blueman before 2.0.3 in the dbus API CVE-2015-8612...
Updated blueman packages fix security vulnerability
Privilege escalation vulnerability in blueman before 2.0.3 in the dbus API CVE-2015-8612...
[slackware-security] blueman
New blueman packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/blueman-r708-i486-4slack14.1.txz: Rebuilt. This update fixes a local privilege escalation vulnerability. For more...
Debian DSA-3427-1 : blueman - security update
It was discovered that the Mechanism plugin of Blueman, a graphical Bluetooth manager, allows local privilege escalation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-3427. The text...
[SECURITY] [DSA 3427-1] blueman security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3427-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff December 18, 2015 https://www.debian.org/security/faq -...
Debian Security Advisory DSA 3427-1 (blueman - security update)
It was discovered that the Mechanism plugin of Blueman, a graphical Bluetooth manager, allows local privilege escalation. OpenVAS Vulnerability Test $Id: deb3427.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory DSA 3427-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbon...
DSA-3427-1 blueman - security update
Bulletin has no description...
blueman set_dhcp_handler D-Bus Privilege Escalation
This module attempts to gain root privileges by exploiting a Python code injection vulnerability in blueman versions prior to 2.0.3. The org.blueman.Mechanism.EnableNetwork D-Bus interface exposes the setdhcphandler function which uses user input in a call to eval, without sanitization, resulting...
Debian: Security Advisory (DSA-3427-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2016-3934
Name of the Vulnerable Software and Affected Versions Blueman versions prior to 2.0.3 Description The issue allows local users to gain privileges. It is related to the EnableNetwork method in the Network class. The dhcp handler argument is involved in the issue. Recommendations For versions prior...