CVE

Id
43756  
CVE No.
CVE-2010-1172  
Status
Candidate  
Description
DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.  
Phase
Assigned (20100329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
476573 43756 CVE-2010-1172 CONFIRM:http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615abca6068348c1606ba8eaf13d9ae0  View
476574 43756 CVE-2010-1172 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=585394  View
476575 43756 CVE-2010-1172 CONFIRM:http://support.avaya.com/css/P8/documents/100113103  View
476576 43756 CVE-2010-1172 CONFIRM:http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705  View
476577 43756 CVE-2010-1172 REDHAT:RHSA-2010:0616  View
476578 43756 CVE-2010-1172 URL:http://www.redhat.com/support/errata/RHSA-2010-0616.html  View
476579 43756 CVE-2010-1172 SUSE:SUSE-SR:2010:020  View
476580 43756 CVE-2010-1172 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html  View
476581 43756 CVE-2010-1172 SUSE:SUSE-SR:2010:022  View
476582 43756 CVE-2010-1172 URL:http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html  View
476583 43756 CVE-2010-1172 SUSE:SUSE-SR:2010:019  View
476584 43756 CVE-2010-1172 URL:http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html  View
476585 43756 CVE-2010-1172 BID:42347  View
476586 43756 CVE-2010-1172 URL:http://www.securityfocus.com/bid/42347  View
476587 43756 CVE-2010-1172 SECUNIA:40908  View
476588 43756 CVE-2010-1172 URL:http://secunia.com/advisories/40908  View
476589 43756 CVE-2010-1172 SECUNIA:40925  View
476590 43756 CVE-2010-1172 URL:http://secunia.com/advisories/40925  View
476591 43756 CVE-2010-1172 SECUNIA:42397  View
476592 43756 CVE-2010-1172 URL:http://secunia.com/advisories/42397  View
476593 43756 CVE-2010-1172 VUPEN:ADV-2010-2063  View
476594 43756 CVE-2010-1172 URL:http://www.vupen.com/english/advisories/2010/2063  View
476595 43756 CVE-2010-1172 VUPEN:ADV-2010-3097  View
476596 43756 CVE-2010-1172 URL:http://www.vupen.com/english/advisories/2010/3097  View
476597 43756 CVE-2010-1172 XF:glib-property-security-bypass(61041)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
38162 JVNDB-2010-003947 Apple iPhone OS の Safari におけるサービス運用妨害 (DoS) の脆弱性 iPod touch 用 Apple iPhone OS の Safari には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-1176 43756 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003947.html  View