CVE-2012-1257

Опубликовано: 20 дек. 2011

Источник: redhat

CVSS2: 1.2

Описание

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

Отчет

The Red Hat Security Response Team has rated this issue as having low security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.

Затронутые пакеты

Платформа	Пакет	Состояние
Red Hat Enterprise Linux 4	pidgin	Will not fix
Red Hat Enterprise Linux 5	pidgin	Will not fix
Red Hat Enterprise Linux 6	pidgin	Will not fix

Показывать по

Ссылки на источники

Дополнительная информация

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=798279pidgin: libpurple no way to restrict "private" messages from being sent over session dbus

1.2 Low

CVSS2

Связанные уязвимости

CVE-2012-1257

CVSS3: 5.5

ubuntu

около 6 лет назад

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

CVE-2012-1257

CVSS3: 5.5

nvd

около 6 лет назад

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

CVE-2012-1257

CVSS3: 5.5

debian

около 6 лет назад

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which all ...

GHSA-37jx-v87h-x8gc

CVSS3: 5.5

github

почти 4 года назад

Pidgin 2.10.0 uses DBUS for certain cleartext communication, which allows local users to obtain sensitive information via a dbus session monitor.

1.2 Low

CVSS2