PT-2010-2883

CVE-2010-1172

·

Publicado

2010-08-10

·

Atualizado

2017-08-17

Descrição por

CVSS 2.0
3.6
Baixa
MétricasAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions DBus-GLib version 0.73
Description The issue disregards the access flag of exported GObject properties, allowing local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties. This is demonstrated by properties of services such as DeviceKit-Power, NetworkManager, and ModemManager.
Recommendations For DBus-GLib version 0.73, consider restricting access to the exported GObject properties to minimize the risk of exploitation until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
OPENSUSE-SU-2024:10280-1
RHSA-2010:0616
RHSA-2010_0616
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾