PT-2010-2883
CVE-2010-1172
·
Published
2010-08-10
·
Updated
2017-08-17
Description by
CVSS 2.0
3.6
LowMetricsAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
DBus-GLib version 0.73
Description
The issue disregards the access flag of exported GObject properties, allowing local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties. This is demonstrated by properties of services such as DeviceKit-Power, NetworkManager, and ModemManager.
Recommendations
For DBus-GLib version 0.73, consider restricting access to the exported GObject properties to minimize the risk of exploitation until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾