PT-2015-4012 · Midgard+1 · Midgard2+1

Simon Mcvittie · Publicado 2015-01-26 · Atualizado 2024-06-15 · CVE-2014-8148

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midgard2 version 10.05.7.1

Description The default D-Bus access control rule in Midgard2 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.

Recommendations For Midgard2 version 10.05.7.1, consider modifying the D-Bus access control rule to restrict local users from sending arbitrary method calls or signals to any process on the system bus. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-8148

OPENSUSE-SU-2024:10517-1

Produtos afetados

Midgard2

Suse

Referências · 22

• http://openwall.com/lists/oss-security/2015/01/05/2 · Nota
• https://suse.com/security/cve/CVE-2014-3639 · Nota
• https://suse.com/security/cve/CVE-2014-3533 · Nota
• https://suse.com/security/cve/CVE-2012-3524 · Nota
• https://suse.com/security/cve/CVE-2014-8148 · Nota
• https://suse.com/security/cve/CVE-2015-0245 · Nota
• https://suse.com/security/cve/CVE-2014-3636 · Nota
• https://suse.com/security/cve/CVE-2013-2168 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2014-8148 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2014-8148 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3638 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10517-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3532 · Nota
• https://cve.org/CVERecord?id=CVE-2014-8148 · Nota de Segurança
• https://suse.com/security/cve/CVE-2014-3635 · Nota