PT-2010-2883
CVE-2010-1172
·
تاريخ النشر
2010-08-10
·
تاريخ التحديث
2017-08-17
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
DBus-GLib version 0.73
Description
The issue disregards the access flag of exported GObject properties, allowing local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties. This is demonstrated by properties of services such as DeviceKit-Power, NetworkManager, and ModemManager.
Recommendations
For DBus-GLib version 0.73, consider restricting access to the exported GObject properties to minimize the risk of exploitation until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾