PT-2010-2883

CVE-2010-1172

·

Published

2010-08-10

·

Updated

2017-08-17

Description by

CVSS 2.0
3.6
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions DBus-GLib version 0.73
Description The issue disregards the access flag of exported GObject properties, allowing local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties. This is demonstrated by properties of services such as DeviceKit-Power, NetworkManager, and ModemManager.
Recommendations For DBus-GLib version 0.73, consider restricting access to the exported GObject properties to minimize the risk of exploitation until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
OPENSUSE-SU-2024:10280-1
RHSA-2010:0616
RHSA-2010_0616
Found an issue in the description? Have something to add? Feel free to write us 👾