CVE-2012-3524

CVE-2012-3524 affects libdbus 1.5.x and earlier when used in setuid/privileged programs; it permits local privilege escalation via the DBUS_SYSTEM_BUS_ADDRESS environment variable. Mitigation per the advisories is that the vulnerability lies in applications that fail to cleanse environment variab...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

CentOS Update for dbus CESA-2012:1261 centos6

Check for the Version of dbus OpenVAS Vulnerability Test CentOS Update for dbus CESA-2012:1261 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CentOS Update for dbus CESA-2012:1261 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for dbus RHSA-2012:1261-01

Check for the Version of dbus OpenVAS Vulnerability Test RedHat Update for dbus RHSA-2012:1261-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Scientific Linux Security Update : dbus on SL6.x i386/x86_64 (20120913)

It was discovered that the D-Bus library honored environment settings even when running with elevated privileges. A local attacker could possibly use this flaw to escalate their privileges, by setting specific environment variables before running a setuid or setgid application linked against the...

RHEL 6 : dbus (RHSA-2012:1261)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1261 advisory. D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session...

CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

dbus security update

CentOS Errata and Security Advisory CESA-2012:1261 Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score...

dbus: privilege escalation when libdbus is used in setuid/setgid application

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUSSYSTEMBUSADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the...

Scientific Linux Security Update : dbus on SL5.x i386/x86_64

It was discovered that the last dbus security update did not correctly fix the denial of service flaw in the system for sending messages between applications. A local user could use this flaw to send a message with a malformed signature to the bus, causing the bus and, consequently, any process...

CentOS Update for dbus CESA-2011:0376 centos5 x86_64

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation

/ dzug.c CVE-2012-3524 PoC C 2012 Sebastian Krahmer Trivial non-dbus root exploit. Yes, it is 2012! The underlying bug insecure getenv by default has been reported ages ago, but nobody really cared. Unless you have an exploit... / include include include include include include include include...

libdbus - DBUS_SYSTEM_BUS_ADDRESS Local Privilege Escalation

libdbus - DBUSSYSTEMBUSADDRESS Local Privilege Escalation / dzug.c CVE-2012-3524 PoC C 2012 Sebastian Krahmer Trivial non-dbus root exploit. Yes, it is 2012! The underlying bug insecure getenv by default has been reported ages ago, but nobody really cared. Unless you have an exploit... / include...

Solaris 10 (sparc) : 148002-01 (deprecated)

SunOS 5.10: libdbus-1.so.3.4.2 patch. Date this patch was last updated by Sun : May/04/12 This plugin has been deprecated and either replaced with individual 148002 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...

CentOS Update for dbus CESA-2011:0376 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu 8.04 LTS / 10.04 LTS : dbus-glib vulnerability (USN-1138-1)

It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service. Note that Tenable Network Security has extracted t...

Moderate: Red Hat Security Advisory: dbus security update

Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dbus security update

CentOS Errata and Security Advisory CESA-2010:0018 Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between...