PT-2015-4012 · Midgard+1 · Midgard2+1

Simon Mcvittie · Published 2015-01-26 · Updated 2024-06-15 · CVE-2014-8148

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Midgard2 version 10.05.7.1

Description The default D-Bus access control rule in Midgard2 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.

Recommendations For Midgard2 version 10.05.7.1, consider modifying the D-Bus access control rule to restrict local users from sending arbitrary method calls or signals to any process on the system bus. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-8148

OPENSUSE-SU-2024:10517-1

Affected Products

Midgard2

Suse

References · 22

• https://osv.dev/vulnerability/UBUNTU-CVE-2014-8148 · Vendor Advisory
• https://ubuntu.com/security/CVE-2014-8148 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10517-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2014-8148 · Security Note
• http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-8148 · Security Note
• http://openwall.com/lists/oss-security/2015/01/05/2 · Note
• https://suse.com/security/cve/CVE-2014-3639 · Note
• https://suse.com/security/cve/CVE-2014-3533 · Note
• https://suse.com/security/cve/CVE-2012-3524 · Note
• https://suse.com/security/cve/CVE-2014-8148 · Note
• https://suse.com/security/cve/CVE-2015-0245 · Note
• https://suse.com/security/cve/CVE-2014-3636 · Note
• https://suse.com/security/cve/CVE-2013-2168 · Note