37 matches found
CVE-2018-8885
screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
Authentication flaw
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...
CVE-2016-5410
CVE-2016-5410 affects firewalld before 0.4.3.3. The vulnerability, described in multiple sources, allows local users to bypass authentication and modify firewall configurations via D‑Bus API methods (addPassthrough, removePassthrough, addEntry, removeEntry, setEntries). This is due to improper ac...
CentOS 7 : polkit-qt (CESA-2014:1359)
Updated polkit-qt packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
RedHat Update for polkit-qt RHSA-2014:1359-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: polkit-qt security update
Updated polkit-qt packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
Fedora Update for udisks2 FEDORA-2014-3714
Check for the Version of udisks2 OpenVAS Vulnerability Test Fedora Update for udisks2 FEDORA-2014-3714 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
[SECURITY] Fedora 19 Update: udisks2-2.1.2-2.fc19
udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices. This package is for the udisks 2.x series...
CentOS Update for udisks CESA-2014:0293 centos6
Check for the Version of udisks OpenVAS Vulnerability Test CentOS Update for udisks CESA-2014:0293 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Udisks及Udisks2长路径名本地栈缓冲区溢出漏洞
BUGTRAQ ID: 66081 CVE ID: CVE-2014-0004 Udisks及Udisks2提供了一个守护程序、D-Bus API及命令行工具,以管理磁盘和存储设备。 udisks及udisks2处理较长的路径名时在实现上存在本地栈缓冲区溢出漏洞,攻击者可利用该漏洞插件特制的目录结构,导致以root权限执行任意代码。 0 freedesktop udisks 厂商补丁: freedesktop ----------- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.freedesktop.org/wiki/Software/udi...
rtkit security update
CentOS Errata and Security Advisory CESA-2013:1282 An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...
RedHat Update for hplip RHSA-2013:1274-01
Check for the Version of hplip OpenVAS Vulnerability Test RedHat Update for hplip RHSA-2013:1274-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...
Scientific Linux Security Update : hplip on SL6.x i386/x86_64 (20130919)
HPLIP communicated with PolicyKit for authorization via a D-Bus API that is vulnerable to a race condition. This could lead to intended PolicyKit authorizations being bypassed. This update modifies HPLIP to communicate with PolicyKit via a different API that is not vulnerable to the race conditio...
[SECURITY] Fedora 13 Update: udisks-1.0.1-1.fc13
udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices...