CVE - CVE-2010-1172

CVE-ID
CVE-2010-1172	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:40908 URL:http://secunia.com/advisories/40908 MISC:40925 URL:http://secunia.com/advisories/40925 MISC:42347 URL:http://www.securityfocus.com/bid/42347 MISC:42397 URL:http://secunia.com/advisories/42397 MISC:ADV-2010-2063 URL:~~http://www.vupen.com/english/advisories/2010/2063~~ (Obsolete source) MISC:ADV-2010-3097 URL:~~http://www.vupen.com/english/advisories/2010/3097~~ (Obsolete source) MISC:RHSA-2010:0616 URL:http://www.redhat.com/support/errata/RHSA-2010-0616.html MISC:SUSE-SR:2010:019 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html MISC:SUSE-SR:2010:020 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html MISC:SUSE-SR:2010:022 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html MISC:glib-property-security-bypass(61041) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/61041 MISC:http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615abca6068348c1606ba8eaf13d9ae0 URL:http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615abca6068348c1606ba8eaf13d9ae0 MISC:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 URL:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705 MISC:http://support.avaya.com/css/P8/documents/100113103 URL:http://support.avaya.com/css/P8/documents/100113103 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=585394 URL:https://bugzilla.redhat.com/show_bug.cgi?id=585394
Assigning CNA
Red Hat, Inc.
Date Record Created
20100329	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100329)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)