Red Hat Security AdvisoryRHSA-2013:0568
dbus-glib security update
Released 2013-02-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) dbus-glib-0.73-11.el5_9, dbus-glib-0.73-11.el5_9.i386, dbus-glib-0.73-11.el5_9.ia64 +5
- Red Hat Enterprise Linux Desktop (v. 6) dbus-glib-0.86-6.el6_4
- Red Hat Enterprise Linux Desktop Optional (v. 6) dbus-glib-0.86-6.el6_4, dbus-glib-devel-0.86-6.el6_4
- Red Hat Enterprise Linux HPC Node (v. 6) dbus-glib-0.86-6.el6_4
- Red Hat Enterprise Linux HPC Node Optional (v. 6) dbus-glib-0.86-6.el6_4, dbus-glib-devel-0.86-6.el6_4
- Red Hat Enterprise Linux Server (v. 6) dbus-glib-0.86-6.el6_4, dbus-glib-0.86-6.el6_4.ppc, dbus-glib-devel-0.86-6.el6_4 +1
- Red Hat Enterprise Linux Workstation (v. 6) dbus-glib-0.86-6.el6_4, dbus-glib-devel-0.86-6.el6_4
Fixes 1 record
Priority LOW 34
The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0109 · Published 2013-03-04 · Fixed CWE-20
