Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2011-0953

Опубликовано: 18 июл. 2011
Источник: oracle-oval
Платформа: Oracle Linux 6

Описание

ELSA-2011-0953: system-config-firewall security update (MODERATE)

system-config-firewall:

[1.2.27-3.3]

  • fixed possible privilege escalation flaw via use of python pickle (CVE-2011-2520), replaced pickle by json (rhbz#717985)
  • stop D-BUS firewall mechanism on update

system-config-printer:

[1.1.16-17:.2]

  • Build pycups with -fno-strict-aliasing compiler option to avoid compiler warnings.

[1.1.16-17:.1]

  • Adapted to system-config-firewall API change (bug #717985, CVE-2011-2520).

Обновленные пакеты

Oracle Linux 6

Oracle Linux x86_64

system-config-firewall

1.2.27-3.el6_1.3

system-config-firewall-base

1.2.27-3.el6_1.3

system-config-firewall-tui

1.2.27-3.el6_1.3

system-config-printer

1.1.16-17.el6_1.2

system-config-printer-libs

1.1.16-17.el6_1.2

system-config-printer-udev

1.1.16-17.el6_1.2

Oracle Linux i686

system-config-firewall

1.2.27-3.el6_1.3

system-config-firewall-base

1.2.27-3.el6_1.3

system-config-firewall-tui

1.2.27-3.el6_1.3

system-config-printer

1.1.16-17.el6_1.2

system-config-printer-libs

1.1.16-17.el6_1.2

system-config-printer-udev

1.1.16-17.el6_1.2

Связанные CVE

CVE-2011-2520

Ссылки на источники

Связанные уязвимости

ubuntu логотип

CVE-2011-2520

CVSS3: 7.8
ubuntu
почти 14 лет назад

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

redhat логотип

CVE-2011-2520

redhat
почти 14 лет назад

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

nvd логотип

CVE-2011-2520

CVSS3: 7.8
nvd
почти 14 лет назад

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

github логотип

GHSA-j359-qhq6-r897

CVSS3: 7.8
github
около 3 лет назад

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

fstec логотип

BDU:2015-06945

fstec
почти 14 лет назад

Уязвимость операционной системы Red Hat Enterprise Linux, позволяющая злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации