2088 matches found
FreeBSD : dbus -- local DoS (52bbc7e8-f13c-11e3-bc09-bcaec565249c)
Simon MvVittie reports : Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service flaw in dbus-daemon, part of the reference implementation of D-Bus. Additionally, in highly unusual environments the same flaw could lead to a side channel between processes that should not be able to...
openSUSE Security Update : gdm (openSUSE-SU-2010:0968-1)
dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. Additionally a bug that prevented XDMCP connections was fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1287-1)
This update fixed CVE-2012-3524 getenv vulnerability, which can be used by local attackers to escalate privileges to root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-670. Th...
openSUSE Security Update : hplip (openSUSE-SU-2013:1617-1)
the following security issue was fixed for HPLIP 3.13.10: usage of an insecure polkit DBUS API fix for bnc836937 and CVE-2013-4325 that are related to CVE-2013-4288 and bnc835827. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...
openSUSE Security Update : dbus-1 (openSUSE-SU-2013:1118-1)
This dbus-1 update fixes a security vulnerability. - Added CVE-2013-2168.patch, fixes referenced vulnerability bnc824607 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2013-545. The...
openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0401-1)
Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-4431. The text description of this plugin ...
openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0880-1)
local users could disconnect system daemons from the bus by sending specially crafted messages CVE-2011-2200. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-4962. The text description ...
openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)
6 vulnerabilities were discovered for the dbus-1 and dbus-1-x11 packages in openSUSE versions 11.4, 12.1, and 12.2. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2012-750. The text...
openSUSE Security Update : dbus-1-glib (openSUSE-SU-2011:0300-1)
dbus-glib allowed local users to write properties that were exported read-only via dbus CVE-2010-1172. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update dbus-1-glib-4237. The text description of...
dbus -- local DoS
Simon MvVittie reports: Alban Crequy at Collabora Ltd. discovered and fixed a denial-of-service flaw in dbus-daemon, part of the reference implementation of D-Bus. Additionally, in highly unusual environments the same flaw could lead to a side channel between processes that should not be able to...
dbus-glib pam_fprintd - Local Root Exploit
Exploit for linux platform in category local exploits / darklena. fprintd/pamfprintd local root PoC. However dbus-glib plays an important role. C 2013 Sebastian Krahmer, all rights reversed. pamfprintd uses net.reactivated.Fprint service to trigger finger swiping and registers DBUS signal inside...
dbus-glib pam_fprintd - Local Privilege Escalation
/ darklena. fprintd/pamfprintd local root PoC. However dbus-glib plays an important role. C 2013 Sebastian Krahmer, all rights reversed. pamfprintd uses net.reactivated.Fprint service to trigger finger swiping and registers DBUS signal inside the PAM authentication function: dbusgproxyaddsignalde...
dbus-glib pam_fprintd - Local Privilege Escalation
dbus-glib pamfprintd - Local Privilege Escalation / darklena. fprintd/pamfprintd local root PoC. However dbus-glib plays an important role. C 2013 Sebastian Krahmer, all rights reversed. pamfprintd uses net.reactivated.Fprint service to trigger finger swiping and registers DBUS signal inside the...
FreeBSD : dbus-glib -- privledge escalation (77bb0541-c1aa-11e3-a5ac-001b21614864)
Sebastian Krahmer reports : A privilege escalation flaw was found in the way dbus-glib, the D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop, performed filtering of the message sender message source subject, when the NameOwnerChanged sign...
CVE-2012-2095
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message...
CVE-2012-2095
Removed by vendor...
SuSE 11.2 / 11.3 Security Update : hplip (SAT Patch Numbers 8775 / 8777)
hplip was updated to fix three security issues : - Some local file overwrite problems via predictable /tmp filenames were fixed. CVE-2013-0200 - hplip used an insecure polkit DBUS API polkit-process subject race condition which could lead to local privilege escalation. CVE-2013-4325 - hplip uses...
Debian DSA-2777-1 : systemd - several vulnerabilities
Multiple security issues in systemd have been discovered by Sebastian Krahmer and Florian Weimer: Insecure interaction with DBUS could lead to the bypass of Policykit restrictions and privilege escalation or denial of service through an integer overflow in journald and missing input sanitising in...
[SECURITY] [DSA 2777-1] systemd security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2777-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 11, 2013 http://www.debian.org/security/faq -...
