CVE-2010-1172

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.39%

Published

Aug 20, 2010

Modified

Apr 28, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.

Weaknesses (CWE)

CWE-264

Affected Products (1)

freedesktop · dbus-glibvulnerable

References (20)

http://cgit.freedesktop.org/dbus/dbus-glib/commit/?h=rhel5&id=9a6bce9b615abca6068348c1606ba8eaf13d9ae0

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705

http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00006.html

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html

http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00006.html

http://secunia.com/advisories/40908

Vendor Advisory