Security Advisory

CVE-2011-2520

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2011-07-21 23:00:00

Last updated 2024-08-06 23:00:34

Assigner redhat

State PUBLISHED

Description

fw_dbus.py in system-config-firewall 1.2.29 and earlier uses the pickle Python module unsafely during D-Bus communication between the GUI and the backend, which might allow local users to gain privileges via a crafted serialized object.

← Browse all CVEs View on cve.org ↗