NVD

Id
45116  
Name
CVE-2012-3524  
Description
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-09-18  
Modified Date
2014-05-05  
Seq
2012-3524  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
226389 45116 CVE-2012-3524 SUSE-SU-2012:1155  View
226390 45116 CVE-2012-3524 SUSE-SU-2012:1155-2  View
226391 45116 CVE-2012-3524 openSUSE-SU-2012:1287  View
226392 45116 CVE-2012-3524 openSUSE-SU-2012:1418  View
226393 45116 CVE-2012-3524 RHSA-2012:1261  View
226394 45116 CVE-2012-3524 http://stealth.openwall.net/null/dzug.c  View
226395 45116 CVE-2012-3524 21323  View
226396 45116 CVE-2012-3524 MDVSA-2013:070  View
226397 45116 CVE-2012-3524 MDVSA-2013:083  View
226398 45116 CVE-2012-3524 [oss-security] 20120710 libdbus hardening  View
226399 45116 CVE-2012-3524 [oss-security] 20120726 Re: libdbus hardening  View
226400 45116 CVE-2012-3524 [oss-security] 20120912 libdbus CVE-2012-3524 fix  View
226401 45116 CVE-2012-3524 [oss-security] 20120914 Re: libdbus CVE-2012-3524 fix  View
226402 45116 CVE-2012-3524 [oss-security] 20120917 Re: libdbus CVE-2012-3524 fix  View
226403 45116 CVE-2012-3524 55517  View
226404 45116 CVE-2012-3524 USN-1576-1  View
226405 45116 CVE-2012-3524 USN-1576-2  View
226406 45116 CVE-2012-3524 https://bugs.freedesktop.org/show_bug.cgi?id=52202  View
226407 45116 CVE-2012-3524 https://bugzilla.novell.com/show_bug.cgi?id=697105  View
226408 45116 CVE-2012-3524 https://bugzilla.redhat.com/show_bug.cgi?id=847402  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
28744 JVNDB-2012-004451 libdbus における権限を取得される脆弱性 libdbus は、X.org などの製品において、setuid またはその他の特権的プログラムで使用される場合、権限を取得される、および任意のコードを実行される脆弱性が存在します。 CVE-2012-3524 56762 CVE-2012-3524 45116 6.9 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004451.html 2012-09-18 2012-11-09 View