Executive Summary

Informations
Name CVE-2010-1172 First vendor Publication 2010-08-20
Vendor Cve Last vendor Modification 2017-08-17

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:N/I:P/A:P)
Cvss Base Score 3.6 Attack Range Local
Cvss Impact Score 4.9 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1172

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-264 Permissions, Privileges, and Access Controls

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:21016
 
Oval ID: oval:org.mitre.oval:def:21016
Title: USN-1138-1 -- dbus-glib vulnerability
Description: An attacker could send crafted input to applications using DBus-GLib and cause them to crash.
Family: unix Class: patch
Reference(s): USN-1138-1
CVE-2010-1172
 Version: 5
Platform(s): Ubuntu 10.04
Ubuntu 8.04
 Product(s): dbus-glib
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21617
 
Oval ID: oval:org.mitre.oval:def:21617
Title: RHSA-2010:0616: dbus-glib security update (Moderate)
Description: DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
Family: unix Class: patch
Reference(s): RHSA-2010:0616-01
CESA-2010:0616
CVE-2010-1172
 Version: 4
Platform(s): Red Hat Enterprise Linux 5
CentOS Linux 5
 Product(s): NetworkManager
dbus-glib
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:22928
 
Oval ID: oval:org.mitre.oval:def:22928
Title: ELSA-2010:0616: dbus-glib security update (Moderate)
Description: DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
Family: unix Class: patch
Reference(s): ELSA-2010:0616-01
CVE-2010-1172
 Version: 6
Platform(s): Oracle Linux 5
 Product(s): NetworkManager
dbus-glib
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:28089
 
Oval ID: oval:org.mitre.oval:def:28089
Title: DEPRECATED: ELSA-2010-0616 -- dbus-glib security update (moderate)
Description: NetworkManager: [1:0.7.0-10.el5_5.1] - Rebuild to fix D-Bus property access (for dbus-glib CVE-2010-1172) dbus-glib: [0.73-10] - Add patch to fix CVE-2010-1172 Drop broken-xml.patch which this one now incorporates Resolves: #588397 (and #585395)
Family: unix Class: patch
Reference(s): ELSA-2010-0616
CVE-2010-1172
 Version: 4
Platform(s): Oracle Linux 5
 Product(s): NetworkManager
dbus-glib
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1

OpenVAS Exploits

Date Description
2011-08-09 Name : CentOS Update for NetworkManager CESA-2010:0616 centos5 i386
File : nvt/gb_CESA-2010_0616_NetworkManager_centos5_i386.nasl
2011-08-09 Name : CentOS Update for dbus-glib CESA-2010:0616 centos5 i386
File : nvt/gb_CESA-2010_0616_dbus-glib_centos5_i386.nasl
2011-06-03 Name : Ubuntu Update for dbus-glib USN-1138-1
File : nvt/gb_ubuntu_USN_1138_1.nasl
2011-06-03 Name : Ubuntu Update for modemmanager USN-1138-2
File : nvt/gb_ubuntu_USN_1138_2.nasl
2010-08-24 Name : Fedora Update for DeviceKit-power FEDORA-2010-12863
File : nvt/gb_fedora_2010_12863_DeviceKit-power_fc13.nasl
2010-08-24 Name : Fedora Update for dbus-glib FEDORA-2010-12863
File : nvt/gb_fedora_2010_12863_dbus-glib_fc13.nasl
2010-08-24 Name : Fedora Update for DeviceKit-power FEDORA-2010-12911
File : nvt/gb_fedora_2010_12911_DeviceKit-power_fc12.nasl
2010-08-24 Name : Fedora Update for ModemManager FEDORA-2010-12911
File : nvt/gb_fedora_2010_12911_ModemManager_fc12.nasl
2010-08-24 Name : Fedora Update for NetworkManager FEDORA-2010-12911
File : nvt/gb_fedora_2010_12911_NetworkManager_fc12.nasl
2010-08-24 Name : Fedora Update for dbus-glib FEDORA-2010-12911
File : nvt/gb_fedora_2010_12911_dbus-glib_fc12.nasl
2010-08-13 Name : RedHat Update for dbus-glib RHSA-2010:0616-01
File : nvt/gb_RHSA-2010_0616-01_dbus-glib.nasl

Open Source Vulnerability Database (OSVDB)

Id Description
67026 dbus-glib D-Bus GLib Bindings Property Local Access Restriction Bypass

Nessus® Vulnerability Scanner

Date Description
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_3_gdm-100915.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_3_dbus-1-glib-110325.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : suse_11_3_NetworkManager-110325.nasl - Type : ACT_GATHER_INFO
2013-07-12 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2010-0616.nasl - Type : ACT_GATHER_INFO
2012-08-01 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20100810_dbus_glib_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2011-06-13 Name : The remote Ubuntu host is missing one or more security-related patches.
File : ubuntu_USN-1138-2.nasl - Type : ACT_GATHER_INFO
2011-06-13 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1138-1.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_1_gdm-100915.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_2_NetworkManager-110325.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_2_dbus-1-glib-110325.nasl - Type : ACT_GATHER_INFO
2011-05-05 Name : The remote openSUSE host is missing a security update.
File : suse_11_2_gdm-100915.nasl - Type : ACT_GATHER_INFO
2011-01-21 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_NetworkManager-100916.nasl - Type : ACT_GATHER_INFO
2011-01-21 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_gdm-100930.nasl - Type : ACT_GATHER_INFO
2010-12-02 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_NetworkManager-100901.nasl - Type : ACT_GATHER_INFO
2010-12-02 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_gdm-101006.nasl - Type : ACT_GATHER_INFO
2010-12-02 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_dbus-1-glib-100901.nasl - Type : ACT_GATHER_INFO
2010-08-23 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-12911.nasl - Type : ACT_GATHER_INFO
2010-08-23 Name : The remote Fedora host is missing one or more security updates.
File : fedora_2010-12863.nasl - Type : ACT_GATHER_INFO
2010-08-12 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2010-0616.nasl - Type : ACT_GATHER_INFO
2010-08-12 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2010-0616.nasl - Type : ACT_GATHER_INFO

Sources (Detail)

Source Url
BID http://www.securityfocus.com/bid/42347
CONFIRM http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615...
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
http://support.avaya.com/css/P8/documents/100113103
https://bugzilla.redhat.com/show_bug.cgi?id=585394
REDHAT http://www.redhat.com/support/errata/RHSA-2010-0616.html
SECUNIA http://secunia.com/advisories/40908
http://secunia.com/advisories/40925
http://secunia.com/advisories/42397
SUSE http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html
VUPEN http://www.vupen.com/english/advisories/2010/2063
http://www.vupen.com/english/advisories/2010/3097
XF https://exchange.xforce.ibmcloud.com/vulnerabilities/61041

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
Date Informations
2021-05-04 12:11:16
  • Multiple Updates
2021-04-22 01:11:56
  • Multiple Updates
2020-05-23 00:25:31
  • Multiple Updates
2017-08-17 09:22:58
  • Multiple Updates
2016-12-08 09:23:23
  • Multiple Updates
2016-04-26 19:41:57
  • Multiple Updates
2014-06-14 13:28:30
  • Multiple Updates
2014-02-17 10:54:29
  • Multiple Updates
2013-05-10 23:21:30
  • Multiple Updates