Code injection

fwdbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object...

CVE-2011-2520

fwdbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object...

CVE-2011-2520

CVE-2011-2520 affects system-config-firewall (fw_dbus.py) where Python pickle is used insecurely in D-Bus communication between the GUI and backend, potentially allowing a local user to gain privileges. Affected version: 1.2.29 and earlier. Red Hat and MiracleLinux advisories note this was addres...