CVE-2015-8612

CVE-2015-8612 affects Blueman up to version 2.0.3, where the EnableNetwork() method in the D-Bus interface allows an attacker with local access to escalate privileges via the dhcp_handler argument. The root cause is input unsanitization in a call to eval() on user-provided data, enabling arbitrar...