Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE: 2012:1155-2 Alert: Local Exploit Risk in dbus-1 Detected

suse
Calendar Grey September 14, 2012
Scroller Suse
SUSE Security Enhancement for dbus-1: Critical issues resolved to mitigate local threat potential in SUSE Linux Enterprise Server.
An update that contains security fixes can now be installed

Summary

This update fixes a vulnerability in the DBUS auto-launching feature that allowed local users to execute arbitrary programs as root. CVE-2012-3524 has been assigned to this issue. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-dbus-1-6750 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64): dbus-1-1.2.10-3.25.2 dbus-1-x11-1.2.10-3.25.2 - SUSE Linux Enterprise Server 11 SP1 LTSS (s390x x86_64): dbus-1-32bit-1.2.10-3.25.2

Topics%20covered

Topics Covered

security advisory local exploit important SUSE Linux dbus-1

References

#697105 #764047

Affected Products:

SUSE Linux Enterprise Server 11 SP1 LTSS

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:1155-2
Rating: important

Topics%20covered

Topics Covered

security advisory local exploit important SUSE Linux dbus-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.