CVE-2014-8148

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

The default D-Bus access control rule in Midgard2 10.05.7.1 allows local users to send arbitrary method calls or signals to any process on the system bus and possibly execute arbitrary code with root privileges.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/05/2Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-01/msg00051.htmlThird Party Advisory
http://lists.opensuse.org/opensuse-updates/2015-02/msg00066.htmlThird Party Advisory
http://www.openwall.com/lists/oss-security/2015/01/05/2Mailing List, Third Party Advisory

Timeline

Published: Jan 26, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-81498.8OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.CVE-2014-81504.3CRLF injection vulnerability in libcurl 6.0 through 7.x before 7.40.0, when using an HTTP proxy, allows remote attackers to inject arbitrary CVE-2014-81515.8The darwinssl_connect_step1 function in lib/vtls/curl_darwinssl.c in libcurl 7.31.0 through 7.39.0, when using the DarwinSSL (aka SecureTran CVE-2014-81525.0Apache Santuario XML Security for Java 2.0.x before 2.0.3 allows remote attackers to bypass the streaming XML signature protection mechanism CVE-2014-81534.0The L3 agent in OpenStack Neutron 2014.2.x before 2014.2.2, when using radvd 2.0+, allows remote authenticated users to cause a denial of se CVE-2014-81547.5The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows cont CVE-2014-81554.3GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spo CVE-2014-81567.8The D-Bus security policy files in /etc/dbus-1/system.d/*.conf in fso-gsmd 0.12.0-3, fso-frameworkd 0.9.5.9+git20110512-4, and fso-usaged 0.CVE-2014-81577.5Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (cra CVE-2014-81586.8Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash CVE-2014-81596.9The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly CVE-2014-81605.0net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during handling of certain