CVE-2013-0292

Published: Mar 5, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The dbus_g_proxy_manager_filter function in dbus-gproxy in Dbus-glib before 0.100.1 does not properly verify the sender of NameOwnerChanged signals, which allows local users to gain privileges via a spoofed signal.

Affected (16)

Products: Freedesktop: Dbus Glib

1 product

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Freedesktop Dbus Glib	Up to 0.100
Freedesktop Dbus Glib	Version 0.72
Freedesktop Dbus Glib	Version 0.73
Freedesktop Dbus Glib	Version 0.74
Freedesktop Dbus Glib	Version 0.76
Freedesktop Dbus Glib	Version 0.78
Freedesktop Dbus Glib	Version 0.80
Freedesktop Dbus Glib	Version 0.82
Freedesktop Dbus Glib	Version 0.84
Freedesktop Dbus Glib	Version 0.86
Freedesktop Dbus Glib	Version 0.88
Freedesktop Dbus Glib	Version 0.90
Freedesktop Dbus Glib	Version 0.92
Freedesktop Dbus Glib	Version 0.94
Freedesktop Dbus Glib	Version 0.96
Freedesktop Dbus Glib	Version 0.98

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (32)

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=911658

Source: secalert@redhat.com

http://cgit.freedesktop.org/dbus/dbus-glib/commit/?id=166978a09cf5edff4028e670b6074215a4c75eca

Source: secalert@redhat.com

ExploitPatch

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: secalert@redhat.com

http://osvdb.org/90302

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2013-0568.html

Source: secalert@redhat.com

http://secunia.com/advisories/52225

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/52375

Source: secalert@redhat.com

http://secunia.com/advisories/52404

Source: secalert@redhat.com

Vendor Advisory

http://www.exploit-db.com/exploits/33614

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:071

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/02/15/10

Source: secalert@redhat.com

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/57985

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1753-1

Source: secalert@redhat.com

https://bugs.freedesktop.org/show_bug.cgi?id=60916

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/82135

Source: secalert@redhat.com

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=911658

Source: af854a3a-2127-422b-91ae-364da2661108

http://cgit.freedesktop.org/dbus/dbus-glib/commit/?id=166978a09cf5edff4028e670b6074215a4c75eca

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/90302

Source: af854a3a-2127-422b-91ae-364da2661108

http://rhn.redhat.com/errata/RHSA-2013-0568.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/52225

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/52375

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/52404

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/33614

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:071

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/02/15/10

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/57985

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1753-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.freedesktop.org/show_bug.cgi?id=60916

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/82135

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.