CVE-2010-1172

Common Vulnerabilities and Exposures

Upstream information

CVE-2010-1172 at MITRE

Description

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

NVD CVSS v2 Base Score: 3.6 (AV:L/AC:L/Au:N/C:N/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entries: 628607, 633621, 633622, 633623, 633629, 633637, 633639, 633648, 633652, 633653, 633654, 633658, 633660, 633678, 633679, 633681, 633682, 633685, 633686, 633700, 633701, 633702

SUSE Security Advisories:

SUSE-SR:2010:019, published Mon, 25 Oct 2010 13:00:00 +0000
SUSE-SR:2010:020, published Wed, 03 Nov 2010 12:00:00 +0000
SUSE-SR:2010:022, published Tue, 30 Nov 2010 12:00:00 +0000
SUSE-SR:2011:007, published Tue, 19 Apr 2011 12:00:00 +0000
openSUSE-SU-2010:0968-1, published Mon, 22 Nov 2010 20:08:10 +0100 (CET)
openSUSE-SU-2010:0969-1, published Mon, 22 Nov 2010 20:08:16 +0100 (CET)
openSUSE-SU-2011:0300-1, published Wed, 6 Apr 2011 17:08:18 +0200 (CEST)
openSUSE-SU-2011:0300-2, published Fri, 8 Apr 2011 13:08:30 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SLE 11 SP1 DEBUGINFO	`NetworkManager-debuginfo >= 0.7.0.r4359-15.25.1` `NetworkManager-debugsource >= 0.7.0.r4359-15.25.1`	sled11-sp1.x86-64 sles11-sp1.x86-64 sles11-sp1.s390x sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86 sle11-sp1-sdk.x86-64 sles11-sp1.ppc sle11-sp1-sdk.ppc sles11-sp1.ia64 sles11-sp1-vmware.x86 sles11-sp1-vmware.x86-64 sled11-sp1.x86 sles11-sp1.x86 SAT Patch Nr: 3103
SUSE Linux Enterprise Software Development Kit 11 SP1	`NetworkManager-devel >= 0.7.0.r4359-15.25.1`	sled11-sp1.x86-64 sles11-sp1.x86-64 sles11-sp1.s390x sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86 sle11-sp1-sdk.x86-64 sles11-sp1.ppc sle11-sp1-sdk.ppc sles11-sp1.ia64 sles11-sp1-vmware.x86 sles11-sp1-vmware.x86-64 sled11-sp1.x86 sles11-sp1.x86 SAT Patch Nr: 3103
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware	`NetworkManager >= 0.7.0.r4359-15.25.1` `NetworkManager-glib >= 0.7.0.r4359-15.25.1`	sled11-sp1.x86-64 sles11-sp1.x86-64 sles11-sp1.s390x sle11-sp1-sdk.s390x sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86 sle11-sp1-sdk.x86-64 sles11-sp1.ppc sle11-sp1-sdk.ppc sles11-sp1.ia64 sles11-sp1-vmware.x86 sles11-sp1-vmware.x86-64 sled11-sp1.x86 sles11-sp1.x86 SAT Patch Nr: 3103
SUSE Linux Enterprise 11 GA DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.4.1` `dbus-1-glib-debugsource >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise 11 GA DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.4.1` `dbus-1-glib-debuginfo-x86 >= 0.76-34.4.1` `dbus-1-glib-debugsource >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise 11 GA DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.4.1` `dbus-1-glib-debuginfo-32bit >= 0.76-34.4.1` `dbus-1-glib-debugsource >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise SDK 11 GA	`dbus-1-glib-devel >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise Desktop 11 GA SUSE Linux Enterprise Server 11 GA	`dbus-1-glib >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise Server 11 GA	`dbus-1-glib >= 0.76-34.4.1` `dbus-1-glib-x86 >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
SUSE Linux Enterprise Desktop 11 GA SUSE Linux Enterprise Server 11 GA	`dbus-1-glib >= 0.76-34.4.1` `dbus-1-glib-32bit >= 0.76-34.4.1`	sled11.x86-64 sles11.ppc sle11-sdk.ppc sle11-sdk.x86 sles11.ia64 sle11-sdk.x86-64 sles11.s390x sled11.x86 sles11.x86-64 sle11-sdk.s390x sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 2955
openSUSE 11.2	`NetworkManager-debuginfo >= 0.7.1_git20090811-4.3.3` `NetworkManager-debugsource >= 0.7.1_git20090811-4.3.3` `NetworkManager-glib-debuginfo >= 0.7.1_git20090811-4.3.3`
openSUSE 11.2	`NetworkManager >= 0.7.1_git20090811-4.3.3` `NetworkManager-devel >= 0.7.1_git20090811-4.3.3` `NetworkManager-doc >= 0.7.1_git20090811-4.3.3` `NetworkManager-glib >= 0.7.1_git20090811-4.3.3`
openSUSE 11.3	`NetworkManager-debuginfo >= 0.8-8.2.3` `NetworkManager-debugsource >= 0.8-8.2.3` `NetworkManager-glib-debuginfo >= 0.8-8.2.3`
openSUSE 11.3	`NetworkManager >= 0.8-8.2.3` `NetworkManager-devel >= 0.8-8.2.3` `NetworkManager-doc >= 0.8-8.2.3` `NetworkManager-glib >= 0.8-8.2.3`
openSUSE 11.3	`gdm-debuginfo >= 2.30.2-6.1.1` `gdm-debugsource >= 2.30.2-6.1.1` `gnome-applets-gdm-debuginfo >= 2.30.2-6.1.1`
openSUSE 11.3	`gdm >= 2.30.2-6.1.1` `gdm-branding-upstream >= 2.30.2-6.1.1` `gdm-lang >= 2.30.2-6.1.1` `gnome-applets-gdm >= 2.30.2-6.1.1`
openSUSE 11.2	`dbus-1-glib-debuginfo >= 0.80-3.4.1` `dbus-1-glib-debuginfo-32bit >= 0.80-3.4.1` `dbus-1-glib-debugsource >= 0.80-3.4.1` `dbus-1-glib-devel-debuginfo >= 0.80-3.4.1`
openSUSE 11.2	`dbus-1-glib >= 0.80-3.4.1` `dbus-1-glib-32bit >= 0.80-3.4.1` `dbus-1-glib-devel >= 0.80-3.4.1` `dbus-1-glib-doc >= 0.80-3.4.1`
openSUSE 11.3	`dbus-1-glib-debuginfo >= 0.86-2.3.1` `dbus-1-glib-debuginfo-32bit >= 0.86-2.3.1` `dbus-1-glib-debugsource >= 0.86-2.3.1` `dbus-1-glib-devel-debuginfo >= 0.86-2.3.1`
openSUSE 11.3	`dbus-1-glib >= 0.86-2.3.1` `dbus-1-glib-32bit >= 0.86-2.3.1` `dbus-1-glib-devel >= 0.86-2.3.1` `dbus-1-glib-doc >= 0.86-2.3.1`
SUSE Linux Enterprise 11 GA DEBUGINFO	`NetworkManager-debuginfo >= 0.7.0.r4359-15.20.10.12` `NetworkManager-debugsource >= 0.7.0.r4359-15.20.10.12`	sle11-sdk.s390x sles11.s390x sles11.x86-64 sles11.ppc sled11.x86-64 sle11-sdk.ppc sles11.ia64 sled11.x86 sle11-sdk.x86-64 sle11-sdk.x86 sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 3094
SUSE Linux Enterprise SDK 11 GA	`NetworkManager-devel >= 0.7.0.r4359-15.20.10.12`	sle11-sdk.s390x sles11.s390x sles11.x86-64 sles11.ppc sled11.x86-64 sle11-sdk.ppc sles11.ia64 sled11.x86 sle11-sdk.x86-64 sle11-sdk.x86 sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 3094
SUSE Linux Enterprise Desktop 11 GA SUSE Linux Enterprise Server 11 GA	`NetworkManager >= 0.7.0.r4359-15.20.10.12` `NetworkManager-glib >= 0.7.0.r4359-15.20.10.12`	sle11-sdk.s390x sles11.s390x sles11.x86-64 sles11.ppc sled11.x86-64 sle11-sdk.ppc sles11.ia64 sled11.x86 sle11-sdk.x86-64 sle11-sdk.x86 sle11-sdk.ia64 sles11.x86 SAT Patch Nr: 3094
SLE 11 SP1 DEBUGINFO	`gdm-debuginfo >= 2.24.0-24.28.1` `gdm-debugsource >= 2.24.0-24.28.1`	sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ppc sles11-sp1-vmware.x86-64 sles11-sp1-vmware.x86 sled11-sp1.x86-64 SAT Patch Nr: 3222
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware	`gdm >= 2.24.0-24.28.1` `gdm-branding-upstream >= 2.24.0-24.28.1` `gdm-lang >= 2.24.0-24.28.1`	sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86 sles11-sp1.ppc sles11-sp1-vmware.x86-64 sles11-sp1-vmware.x86 sled11-sp1.x86-64 SAT Patch Nr: 3222
SUSE Linux Enterprise 11 GA DEBUGINFO	`gdm-debuginfo >= 2.24.0-24.39.1` `gdm-debugsource >= 2.24.0-24.39.1`	sles11.s390x sles11.ia64 sled11.x86-64 sles11.x86 sled11.x86 sles11.x86-64 sles11.ppc SAT Patch Nr: 3255
SUSE Linux Enterprise Desktop 11 GA SUSE Linux Enterprise Server 11 GA	`gdm >= 2.24.0-24.39.1` `gdm-branding-upstream >= 2.24.0-24.39.1` `gdm-lang >= 2.24.0-24.39.1`	sles11.s390x sles11.ia64 sled11.x86-64 sles11.x86 sled11.x86 sles11.x86-64 sles11.ppc SAT Patch Nr: 3255
openSUSE 11.1	`gdm-debuginfo >= 2.24.0-15.1.1` `gdm-debugsource >= 2.24.0-15.1.1`
openSUSE 11.1	`gdm >= 2.24.0-15.1.1` `gdm-branding-upstream >= 2.24.0-15.1.1` `gdm-lang >= 2.24.0-15.1.1`
openSUSE 11.2	`gdm-debuginfo >= 2.28.2-0.2.2` `gdm-debugsource >= 2.28.2-0.2.2`
openSUSE 11.2	`gdm >= 2.28.2-0.2.2` `gdm-branding-upstream >= 2.28.2-0.2.2` `gdm-lang >= 2.28.2-0.2.2`
SLE 11 SP1 DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.7.1` `dbus-1-glib-debugsource >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SLE 11 SP1 DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.7.1` `dbus-1-glib-debuginfo-x86 >= 0.76-34.7.1` `dbus-1-glib-debugsource >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SLE 11 SP1 DEBUGINFO	`dbus-1-glib-debuginfo >= 0.76-34.7.1` `dbus-1-glib-debuginfo-32bit >= 0.76-34.7.1` `dbus-1-glib-debugsource >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SUSE Linux Enterprise Software Development Kit 11 SP1	`dbus-1-glib-devel >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware	`dbus-1-glib >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SUSE Linux Enterprise Server 11 SP1	`dbus-1-glib >= 0.76-34.7.1` `dbus-1-glib-x86 >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182
SUSE Linux Enterprise Desktop 11 SP1 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP1 for VMware	`dbus-1-glib >= 0.76-34.7.1` `dbus-1-glib-32bit >= 0.76-34.7.1`	sle11-sp1-sdk.ppc sle11-sp1-sdk.ia64 sle11-sp1-sdk.x86-64 sle11-sp1-sdk.x86 sles11-sp1.ppc sle11-sp1-sdk.s390x sles11-sp1-vmware.x86 sles11-sp1.s390x sles11-sp1.ia64 sles11-sp1-vmware.x86-64 sles11-sp1.x86 sled11-sp1.x86 sles11-sp1.x86-64 sled11-sp1.x86-64 SAT Patch Nr: 3182