Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
BID:67122
Info
Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
| Bugtraq ID: | 67122 |
| Class: | Design Error |
| CVE: |
CVE-2013-7374 |
| Remote: | No |
| Local: | Yes |
| Published: | Oct 31 2013 12:00AM |
| Updated: | May 02 2014 12:51AM |
| Credit: | Marc Deslauriers |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
Ubuntu indicator-datetime package is prone to a local security-bypass vulnerability.
Local attackers can exploit this issue to bypass authentication mechanism and gain access to the affected system.
Ubuntu indicator-datetime package is prone to a local security-bypass vulnerability.
Local attackers can exploit this issue to bypass authentication mechanism and gain access to the affected system.
Exploit / POC
Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
Attackers with physical access to an affected system can exploit this issue to gain unauthorized access.
Attackers with physical access to an affected system can exploit this issue to gain unauthorized access.
Solution / Fix
Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Ubuntu indicator-datetime Package 'src/service.c' Local Security Bypass Vulnerability
References:
References:
- Ubuntu Homepage (Ubuntu)