PT-2014-2338 · Mate · Mate-Settings-Daemon

Miloslav Trmač · Publicado 2014-05-30 · Atualizado 2014-06-24 · CVE-2012-5560

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions mate-settings-daemon version 1.5.3

Description The issue allows local users to change the system timezone via a crafted D-Bus call due to the default configuration in mate-settings-daemon.

Recommendations For mate-settings-daemon version 1.5.3, consider restricting access to the D-Bus interface to prevent unauthorized changes to the system timezone.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-5560

Produtos afetados

Mate-Settings-Daemon

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-5560 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=878102 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099552.html · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099545.html · Aviso do Fabricante