[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249461

 
 

909

 
 

195508

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2012-2095Date: (C)2014-04-11   (M)2023-12-22


The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 6.9
Exploit Score: 3.4
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
EXPLOIT-DB-18733
SECUNIA-48759
SECUNIA-49657
BID-52987
FEDORA-2012-5858
FEDORA-2012-5909
FEDORA-2012-5923
GLSA-201206-08
http://www.openwall.com/lists/oss-security/2012/04/11/2
http://www.openwall.com/lists/oss-security/2012/04/11/3
http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397
http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html
https://bugs.launchpad.net/wicd/+bug/979221
https://launchpad.net/wicd/+announcement/9888

CPE    22
cpe:/a:david_paleino:wicd:1.5.9
cpe:/a:david_paleino:wicd:1.5.8
cpe:/a:david_paleino:wicd:1.5.7
cpe:/a:david_paleino:wicd:1.5.6
...
CWE    1
CWE-20
OVAL    3
oval:org.secpod.oval:def:103680
oval:org.secpod.oval:def:103689
oval:org.secpod.oval:def:103682

© SecPod Technologies