CVE

Id
55563  
CVE No.
CVE-2012-2320  
Status
Candidate  
Description
ConnMan before 0.85 does not ensure that netlink messages originate from the kernel, which allows remote attackers to bypass intended access restrictions and cause a denial of service via a crafted netlink message.  
Phase
Assigned (20120419)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
579707 55563 CVE-2012-2320 MLIST:[oss-security] 20120507 Re: connman heads up / CVE requests  View
579708 55563 CVE-2012-2320 URL:http://www.openwall.com/lists/oss-security/2012/05/07/10  View
579709 55563 CVE-2012-2320 MLIST:[oss-security] 20120507 Re: connman heads up / CVE requests  View
579710 55563 CVE-2012-2320 URL:http://www.openwall.com/lists/oss-security/2012/05/07/6  View
579711 55563 CVE-2012-2320 MLIST:[oss-security] 20120507 connman heads up / CVE requests  View
579712 55563 CVE-2012-2320 URL:http://www.openwall.com/lists/oss-security/2012/05/07/2  View
579713 55563 CVE-2012-2320 MISC:https://bugzilla.novell.com/show_bug.cgi?id=715172  View
579714 55563 CVE-2012-2320 CONFIRM:http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=b0ec6eb4466acc57a9ea8be52c17b674b6ea0618  View
579715 55563 CVE-2012-2320 CONFIRM:http://git.kernel.org/?p=network/connman/connman.git;a=commit;h=c1b968984212b46bea1330f5ae029507b9bfded9  View
579716 55563 CVE-2012-2320 GENTOO:GLSA-201205-02  View
579717 55563 CVE-2012-2320 URL:http://security.gentoo.org/glsa/glsa-201205-02.xml  View
579718 55563 CVE-2012-2320 BID:53406  View
579719 55563 CVE-2012-2320 URL:http://www.securityfocus.com/bid/53406  View
579720 55563 CVE-2012-2320 OSVDB:81704  View
579721 55563 CVE-2012-2320 URL:http://www.osvdb.org/81704  View
579722 55563 CVE-2012-2320 SECUNIA:49033  View
579723 55563 CVE-2012-2320 URL:http://secunia.com/advisories/49033  View
579724 55563 CVE-2012-2320 SECUNIA:49186  View
579725 55563 CVE-2012-2320 URL:http://secunia.com/advisories/49186  View
579726 55563 CVE-2012-2320 XF:connman-netlink-security-bypass(75465)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27862 JVNDB-2012-003569 MyBB の管理者用コントロールパネルにおける SQL インジェクションの脆弱性 MyBB の管理者用コントロールパネル (ACP) 内の User Inline Moderation 機能には、SQL インジェクションの脆弱性が存在します。 CVE-2012-2325 55563 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003569.html  View