Red Hat Security Advisory 2012-1261-01

newsbot

newsbot

RSS Feed
Red Hat Security Advisory 2012-1261-01 - D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility. It was discovered that the D-Bus library honored environment settings even when running with elevated privileges. A local attacker could possibly use this flaw to escalate their privileges, by setting specific environment variables before running a setuid or setgid application linked against the D-Bus library. Note: With this update, libdbus ignores environment variables when used by setuid or setgid applications. The environment is not ignored when an application gains privileges via file system capabilities; however, no application shipped in Red Hat Enterprise Linux 6 gains privileges via file system capabilities.

Weiterlesen...
 

Ähnliche Themen

Zugriff Ubuntu 16.04. auf Freigabe 18.04. LTS nicht möglich

Red Hat Security Advisory 2012-1361-01

Red Hat Security Advisory 2012-1590-01

Red Hat Security Advisory 2012-1284-01

Red Hat Security Advisory 2012-1512-01

Zurück
Oben