Solution
Please Install the Updated Packages.
Insight
Sebastian Krahmer and Bastien Nocera discovered that DBus-GLib did not properly validate the message sender when the " NameOwnerChanged"
signal was
received. A local attacker could possibly use this issue to escalate their privileges.
Affected
dbus-glib on Ubuntu 12.10 ,
Ubuntu 12.04 LTS ,
Ubuntu 11.10 ,
Ubuntu 10.04 LTS
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2013-0292 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities