PT-2014-2338 · Mate · Mate-Settings-Daemon

Miloslav Trmač · Published 2014-05-30 · Updated 2014-06-24 · CVE-2012-5560

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions mate-settings-daemon version 1.5.3

Description The issue allows local users to change the system timezone via a crafted D-Bus call due to the default configuration in mate-settings-daemon.

Recommendations For mate-settings-daemon version 1.5.3, consider restricting access to the D-Bus interface to prevent unauthorized changes to the system timezone.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-5560

Affected Products

Mate-Settings-Daemon

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-5560 · Security Note
• http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099552.html · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2013-March/099545.html · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=878102 · Note