Ubuntu 12.10: USN-1753-1 Moderate: DBus-GLib Privilege Escalation

ubuntu

February 27, 2013

An attacker could send crafted input to applications using DBus-GLib and possibly escalate privileges.

Summary

An attacker could send crafted input to applications using DBus-GLib and

possibly escalate privileges.

Software Description:

- dbus-glib: simple interprocess messaging system

Details:

Sebastian Krahmer and Bastien Nocera discovered that DBus-GLib did not

properly validate the message sender when the "NameOwnerChanged" signal was

received. A local attacker could possibly use this issue to escalate their

privileges.

Topics Covered

security advisory privilege escalation moderate severity ubuntu dbus-glib

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  libdbus-glib-1-2                0.100-1ubuntu0.1

Ubuntu 12.04 LTS:
  libdbus-glib-1-2                0.98-1ubuntu1.1

Ubuntu 11.10:
  libdbus-glib-1-2                0.94-4ubuntu0.1

Ubuntu 10.04 LTS:
  libdbus-glib-1-2                0.84-1ubuntu0.3

After a standard system update you need to reboot your computer to make
all the necessary changes.