CVEvulnerability
CVE-2015-8612
8.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-01-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.4 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The EnableNetwork method in the Network class in plugins/mechanism/Network.py in Blueman before 2.0.3 allows local users to gain privileges via the dhcp_handler argument.
Affected configurations
• blueman project blueman (<= 2.0)
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/135047/Slackware-Security-Advisory-blueman-Updates.html packetstormsecurity.com
- http://www.debian.org/security/2015/dsa-3427 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/12/18/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/19/1 www.openwall.com
- http://www.securityfocus.com/bid/79688 www.securityfocus.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.421085 www.slackware.com
- https://github.com/blueman-project/blueman/issues/416 github.com
- https://github.com/blueman-project/blueman/releases/tag/2.0.3 github.com
- https://twitter.com/thegrugq/status/677809527882813440 twitter.com
- https://www.exploit-db.com/exploits/46186/ www.exploit-db.com
- http://packetstormsecurity.com/files/135047/Slackware-Security-Advisory-blueman-Updates.html packetstormsecurity.com
- http://www.debian.org/security/2015/dsa-3427 www.debian.org
- http://www.openwall.com/lists/oss-security/2015/12/18/6 www.openwall.com
- http://www.openwall.com/lists/oss-security/2015/12/19/1 www.openwall.com
- http://www.securityfocus.com/bid/79688 www.securityfocus.com
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.421085 www.slackware.com
- https://github.com/blueman-project/blueman/issues/416 github.com
- https://github.com/blueman-project/blueman/releases/tag/2.0.3 github.com
- https://twitter.com/thegrugq/status/677809527882813440 twitter.com
- https://www.exploit-db.com/exploits/46186/ www.exploit-db.com