CVE-2010-1149

Published: Apr 12, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

probers/udisks-dm-export.c in udisks before 1.0.1 exports UDISKS_DM_TARGETS_PARAMS information to udev even for a crypt UDISKS_DM_TARGETS_TYPE, which allows local users to discover encryption keys by (1) running a certain udevadm command or (2) reading a certain file under /dev/.udev/db/.

Affected (1)

Products: Freedesktop: Udisks

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Udisks	Up to 1.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (18)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576687

Source: secalert@redhat.com

http://cgit.freedesktop.org/udisks/commit/?id=0fcc7cb3b66f23fac53ae08647aa0007a2bd56c4

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039060.html

Source: secalert@redhat.com

http://secunia.com/advisories/39332

Source: secalert@redhat.com

Vendor Advisory

http://www.securityfocus.com/bid/39265

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=27494

Source: secalert@redhat.com

https://bugzilla.novell.com/show_bug.cgi?id=594261

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=580005

Source: secalert@redhat.com

https://launchpad.net/bugs/556651

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576687

Source: af854a3a-2127-422b-91ae-364da2661108

http://cgit.freedesktop.org/udisks/commit/?id=0fcc7cb3b66f23fac53ae08647aa0007a2bd56c4

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039060.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/39332

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/39265

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=27494

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.novell.com/show_bug.cgi?id=594261

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=580005

Source: af854a3a-2127-422b-91ae-364da2661108

https://launchpad.net/bugs/556651

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.