PT-2014-2338

CVE-2012-5560

·

Published

2014-05-30

·

Updated

2014-06-24

Description by

CVSS 2.0
2.1
Low
MetricsAV:L/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions mate-settings-daemon version 1.5.3
Description The issue allows local users to change the system timezone via a crafted D-Bus call due to the default configuration in mate-settings-daemon.
Recommendations For mate-settings-daemon version 1.5.3, consider restricting access to the D-Bus interface to prevent unauthorized changes to the system timezone.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2012-5560
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com