DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172).

dbus-glib allowed local users to write properties that were exported read-only via dbus (CVE-2010-1172).

Additionally a bug that prevented XDMCP connections was fixed.

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2010-0616 advisory.

    - Rebuild to fix D-Bus property access (for dbus-glib CVE-2010-1172)

    dbus-glib:

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that dbus-glib did not enforce the 'access' flag on exported GObject properties. If such a property were read/write internally but specified as read-only externally, a malicious, local user could use this flaw to modify that property of an application.
Such a change could impact the application's behavior (for example, if an IP address were changed the network may not come up properly after reboot) and possibly lead to a denial of service. (CVE-2010-1172)

Due to the way dbus-glib translates an application's XML definitions of service interfaces and properties into C code at application build time, applications built against dbus-glib that use read-only properties needed to be rebuilt to fully fix the flaw. As such, this update provides NetworkManager packages that have been rebuilt against the updated dbus-glib packages. No other applications shipped with Scientific Linux 5 were affected.

Running instances of NetworkManager must be restarted (service NetworkManager restart) for this update to take effect.

It was discovered that DBus-GLib did not properly verify the access flag of exported GObject properties under certain circumstances. A local attacker could exploit this to bypass intended access restrictions or possibly cause a denial of service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update provides the following fixes :

  - 633655: Change the way dbus properties are exported to     avoid write access to read-only properties.

  - 627893: Upon relogin gdm displays the Windows domain,     but tries to authenticate locally

  - 490621: Windows domain not remembered from previous     log-in

  - 583060: Optionally allow to configure to prohibit end     user to use 'root' id at gdm login

  - 506917: Fix window login getting a huge horizontal size

  - 627893: Fix that upon relogin gdm displays the Windows     domain, but tries to authenticate locally. In addition     this update was rebuilt against the latest dbus-glib     bindings to avoid that local users can write properties     that were exported read-only via dbus. (CVE-2010-1172)

dbus-glib allowed local users to write properties that were exported read-only via dbus. (CVE-2010-1172)

This update provides the following fix :

  - 627893: Fix that upon relogin gdm displays the Windows     domain, but tries to authenticate locally. In addition     this update was rebuilt against the latest dbus-glib     bindings to avoid that local users can write properties     that were exported read-only via dbus. (CVE-2010-1172)

A flaw in dbus-glib was fixed that allowed other local programs to bypass the 'access' flag on properties. (CVE-2010-1172)

It was discovered that dbus-glib did not enforce the 'access' flag on exported GObject properties. If such a property were read/write internally but specified as read-only externally, a malicious, local user could use this flaw to modify that property of an application.
Such a change could impact the application's behavior (for example, if an IP address were changed the network may not come up properly after reboot) and possibly lead to a denial of service. (CVE-2010-1172) Due to the way dbus-glib translates an application's XML definitions of service interfaces and properties into C code at application build time, applications built against dbus-glib that use read-only properties needed to be rebuilt to fully fix the flaw. This update provides NetworkManager, ModemManager and DeviceKit-power packages that have been rebuilt against the updated dbus-glib packages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that dbus-glib did not enforce the 'access' flag on exported GObject properties. If such a property were read/write internally but specified as read-only externally, a malicious, local user could use this flaw to modify that property of an application.
Such a change could impact the application's behavior (for example, if an IP address were changed the network may not come up properly after reboot) and possibly lead to a denial of service. (CVE-2010-1172) Due to the way dbus-glib translates an application's XML definitions of service interfaces and properties into C code at application build time, applications built against dbus-glib that use read-only properties needed to be rebuilt to fully fix the flaw. This update provides DeviceKit-power packages that have been rebuilt against the updated dbus-glib packages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated dbus-glib packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

dbus-glib is an add-on library to integrate the standard D-Bus library with the GLib main loop and threading model. NetworkManager is a network link manager that attempts to keep a wired or wireless network connection active at all times.

It was discovered that dbus-glib did not enforce the 'access' flag on exported GObject properties. If such a property were read/write internally but specified as read-only externally, a malicious, local user could use this flaw to modify that property of an application.
Such a change could impact the application's behavior (for example, if an IP address were changed the network may not come up properly after reboot) and possibly lead to a denial of service. (CVE-2010-1172)

Due to the way dbus-glib translates an application's XML definitions of service interfaces and properties into C code at application build time, applications built against dbus-glib that use read-only properties needed to be rebuilt to fully fix the flaw. As such, this update provides NetworkManager packages that have been rebuilt against the updated dbus-glib packages. No other applications shipped with Red Hat Enterprise Linux 5 were affected.

All dbus-glib and NetworkManager users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. Running instances of NetworkManager must be restarted (service NetworkManager restart) for this update to take effect.

ID	Name	Product	Family	Severity
75682	openSUSE Security Update : NetworkManager (openSUSE-SU-2011:0300-2)	Nessus	SuSE Local Security Checks	low
75510	openSUSE Security Update : gdm (openSUSE-SU-2010:0968-1)	Nessus	SuSE Local Security Checks	low
75462	openSUSE Security Update : dbus-1-glib (openSUSE-SU-2011:0300-1)	Nessus	SuSE Local Security Checks	low
68083	Oracle Linux 5 : dbus-glib (ELSA-2010-0616)	Nessus	Oracle Linux Local Security Checks	critical
60833	Scientific Linux Security Update : dbus-glib on SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	low
55099	Ubuntu 8.04 LTS / 10.04 LTS : dbus-glib vulnerability (USN-1138-1)	Nessus	Ubuntu Local Security Checks	low
53782	openSUSE Security Update : NetworkManager (openSUSE-SU-2011:0300-2)	Nessus	SuSE Local Security Checks	low
53725	openSUSE Security Update : gdm (openSUSE-SU-2010:0969-1)	Nessus	SuSE Local Security Checks	low
53705	openSUSE Security Update : dbus-1-glib (openSUSE-SU-2011:0300-1)	Nessus	SuSE Local Security Checks	low
53659	openSUSE Security Update : gdm (openSUSE-SU-2010:0969-1)	Nessus	SuSE Local Security Checks	low
51600	SuSE 11.1 Security Update : GDM (SAT Patch Number 3222)	Nessus	SuSE Local Security Checks	low
51592	SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 3103)	Nessus	SuSE Local Security Checks	low
50908	SuSE 11 Security Update : GDM (SAT Patch Number 3255)	Nessus	SuSE Local Security Checks	low
50900	SuSE 11 / 11.1 Security Update : dbus (SAT Patch Numbers 2955 / 3182)	Nessus	SuSE Local Security Checks	low
50877	SuSE 11 Security Update : NetworkManager (SAT Patch Number 3094)	Nessus	SuSE Local Security Checks	low
48391	Fedora 12 : DeviceKit-power-014-2.fc12 / ModemManager-0.4-5.git20100720.fc12 / etc (2010-12911)	Nessus	Fedora Local Security Checks	low
48390	Fedora 13 : DeviceKit-power-0.9.0-2.fc13 / dbus-glib-0.86-4.fc13 (2010-12863)	Nessus	Fedora Local Security Checks	low
48313	RHEL 5 : dbus-glib (RHSA-2010:0616)	Nessus	Red Hat Local Security Checks	low
48303	CentOS 5 : NetworkManager / dbus-glib (CESA-2010:0616)	Nessus	CentOS Local Security Checks	low

Detections

Analytics

CVE-2010-1172

critical

Tenable Plugins

low

low

low

critical

low

low

low

low

low

low

low

low

low

low

low

low

low

low

low