CVE

Id
50432  
CVE No.
CVE-2011-2520  
Status
Candidate  
Description
fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.  
Phase
Assigned (20110615)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
545255 50432 CVE-2011-2520 MLIST:[oss-security] 20110718 CVE-2011-2520: flaw in system-config-firewall"s usage of pickle allows privilege escalation  View
545256 50432 CVE-2011-2520 URL:http://www.openwall.com/lists/oss-security/2011/07/18/6  View
545257 50432 CVE-2011-2520 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=717985  View
545258 50432 CVE-2011-2520 FEDORA:FEDORA-2011-9652  View
545259 50432 CVE-2011-2520 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063314.html  View
545260 50432 CVE-2011-2520 REDHAT:RHSA-2011:0953  View
545261 50432 CVE-2011-2520 URL:http://www.redhat.com/support/errata/RHSA-2011-0953.html  View
545262 50432 CVE-2011-2520 BID:48715  View
545263 50432 CVE-2011-2520 URL:http://www.securityfocus.com/bid/48715  View
545264 50432 CVE-2011-2520 SECTRACK:1025793  View
545265 50432 CVE-2011-2520 URL:http://securitytracker.com/id?1025793  View
545266 50432 CVE-2011-2520 SECUNIA:45294  View
545267 50432 CVE-2011-2520 URL:http://secunia.com/advisories/45294  View
545268 50432 CVE-2011-2520 XF:systemconfigfirewall-priv-escalation(68734)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25570 JVNDB-2012-001277 Linux kernel の net/sched/sch_api.c におけるサービス運用妨害 (DoS) の脆弱性 Linux kernel の net/sched/sch_api.c 内の qdisc_notify 関数は、builtin Qdisc 構造体を参照する tc_fill_qdisc 関数呼び出しを防止しないため、サービス運用妨害 (NULL ポインタデリファレンスおよび OOPS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-2525 50432 7.2 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001277.html  View