CVE-2012-3524
Estado: ModificadaMedia (6.9)—💥 Exploit
libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."
CVSS
- Versión: 2.0
- Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 6.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.48%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
💥 Exploits públicos
Hay código de explotación o plantillas de detección públicos. No es lo mismo que explotación activa confirmada (KEV), pero aumenta el riesgo: parchee con prioridad.
- Publicado en Exploit-DB · libdbus - 'DBUS_SYSTEM_BUS_ADDRESS' Local Privilege Escalation (17/7/2012)
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
- http://rhn.redhat.com/errata/RHSA-2012-1261.html
- http://secunia.com/advisories/50537
- http://secunia.com/advisories/50544
- http://secunia.com/advisories/50710
- http://stealth.openwall.net/null/dzug.c
- http://www.exploit-db.com/exploits/21323
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:070
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:083
- http://www.openwall.com/lists/oss-security/2012/07/10/4
- http://www.openwall.com/lists/oss-security/2012/07/26/1
- http://www.openwall.com/lists/oss-security/2012/09/12/6
- http://www.openwall.com/lists/oss-security/2012/09/14/2
- http://www.openwall.com/lists/oss-security/2012/09/17/2
- http://www.securityfocus.com/bid/55517
- http://www.ubuntu.com/usn/USN-1576-1
- http://www.ubuntu.com/usn/USN-1576-2
- https://bugs.freedesktop.org/show_bug.cgi?id=52202
- https://bugzilla.novell.com/show_bug.cgi?id=697105
- https://bugzilla.redhat.com/show_bug.cgi?id=847402
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html
- http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html
- http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html
- http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
- http://rhn.redhat.com/errata/RHSA-2012-1261.html
- http://secunia.com/advisories/50537
- http://secunia.com/advisories/50544
- http://secunia.com/advisories/50710
- http://stealth.openwall.net/null/dzug.c
- http://www.exploit-db.com/exploits/21323
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:070
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:083
- http://www.openwall.com/lists/oss-security/2012/07/10/4
- http://www.openwall.com/lists/oss-security/2012/07/26/1
- http://www.openwall.com/lists/oss-security/2012/09/12/6
- http://www.openwall.com/lists/oss-security/2012/09/14/2
- http://www.openwall.com/lists/oss-security/2012/09/17/2
- http://www.securityfocus.com/bid/55517
- http://www.ubuntu.com/usn/USN-1576-1
- http://www.ubuntu.com/usn/USN-1576-2
- https://bugs.freedesktop.org/show_bug.cgi?id=52202
- https://bugzilla.novell.com/show_bug.cgi?id=697105
- https://bugzilla.redhat.com/show_bug.cgi?id=847402
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-3524",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.9,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.4,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "secalert@redhat.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-09-18T17:55:00.990",
"references": [
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html",
"source": "secalert@redhat.com"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2012-1261.html",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/50537",
"tags": [
"Vendor Advisory"
],
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/50544",
"source": "secalert@redhat.com"
},
{
"url": "http://secunia.com/advisories/50710",
"source": "secalert@redhat.com"
},
{
"url": "http://stealth.openwall.net/null/dzug.c",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://www.exploit-db.com/exploits/21323",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:070",
"source": "secalert@redhat.com"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:083",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/10/4",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/26/1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/12/6",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/14/2",
"source": "secalert@redhat.com"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/17/2",
"source": "secalert@redhat.com"
},
{
"url": "http://www.securityfocus.com/bid/55517",
"tags": [
"Exploit"
],
"source": "secalert@redhat.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-1576-1",
"source": "secalert@redhat.com"
},
{
"url": "http://www.ubuntu.com/usn/USN-1576-2",
"source": "secalert@redhat.com"
},
{
"url": "https://bugs.freedesktop.org/show_bug.cgi?id=52202",
"tags": [
"Patch"
],
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.novell.com/show_bug.cgi?id=697105",
"source": "secalert@redhat.com"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847402",
"source": "secalert@redhat.com"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://rhn.redhat.com/errata/RHSA-2012-1261.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/50537",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/50544",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/50710",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://stealth.openwall.net/null/dzug.c",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/21323",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:070",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2013:083",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/10/4",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/07/26/1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/12/6",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/14/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.openwall.com/lists/oss-security/2012/09/17/2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/55517",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-1576-1",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ubuntu.com/usn/USN-1576-2",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugs.freedesktop.org/show_bug.cgi?id=52202",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.novell.com/show_bug.cgi?id=697105",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=847402",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: \"we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus.\""
},
{
"lang": "es",
"value": "Protección v1.5.x y anteriores, cuan es usado con setuid u otros programas con privilegios en X.org y posiblemente otros productos, permite a usuarios locales elevar sus privilegios y ejecutar código de su elección a través de la variable de entorno DBUS_SYSTEM_BUS_ADDRESS environment. NOTA: el equipo de mantenimiento de lindbus indican que esto es un problema de las aplicaciones que no limpian las variables de entorno, no en del propio lindbus."
}
],
"lastModified": "2026-06-16T23:43:24.290",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80411D22-C73A-4C57-82FD-EF1395B50002",
"versionEndIncluding": "1.5.12"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "36365215-0060-4429-8975-E7E13A258E3B"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C06A3700-E412-4B85-8B9A-68A74BE67506"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76929B07-2D3A-4C57-AE58-B1F7F574BA04"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DA67875-83A0-49C4-A9D7-344135CFB8AC"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2AB1DF00-511B-4DEC-99E1-9EBED4CD542A"
},
{
"criteria": "cpe:2.3:a:freedesktop:libdbus:1.5.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F77FCCC8-FF4E-438B-B235-384D8EAD0122"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "secalert@redhat.com"
}