CVE-2011-4349: SQL Injection
First published: Fri Nov 25 2011(Updated: )
Multiple SQL injection flaws were found in the way colord, a color daemon that maps color devices to color profiles in the system context, performed SQL queries sanitization in database routines processing color device mappings and devices. If a local user was allowed to create new devices, and colord daemon was run as root, a local attacker could use this flaw to corrupt colord's own database or potentially other system SQLite3 based and related databases (for example that, used by polkit daemon). References: [1] <a href="https://bugs.freedesktop.org/show_bug.cgi?id=42904">https://bugs.freedesktop.org/show_bug.cgi?id=42904</a> [2] <a href="https://bugzilla.novell.com/show_bug.cgi?id=698250">https://bugzilla.novell.com/show_bug.cgi?id=698250</a> [3] <a href="http://www.openwall.com/lists/oss-security/2011/11/25/1">http://www.openwall.com/lists/oss-security/2011/11/25/1</a> Relevant upstream patches: [4] <a href="http://gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b">http://gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b</a> [5] <a href="http://gitorious.org/colord/master/commit/36549e0ed255e7dfa7852d08a75dd5f00cbd270e">http://gitorious.org/colord/master/commit/36549e0ed255e7dfa7852d08a75dd5f00cbd270e</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Freedesktop Colord | =0.1.10 | |
| Freedesktop Colord | =0.1.4 | |
| Freedesktop Colord | =0.1.8 | |
| Freedesktop Colord | =0.1.7 | |
| Freedesktop Colord | =0.1.12 | |
| Freedesktop Colord | =0.1.5 | |
| Freedesktop Colord | =0.1.13 | |
| Freedesktop Colord | =0.1.3 | |
| Freedesktop Colord | =0.1.2 | |
| Freedesktop Colord | =0.1.9 | |
| Freedesktop Colord | =0.1.6 | |
| Freedesktop Colord | =0.1.11 | |
| Freedesktop Colord | =0.1.0 | |
| Freedesktop Colord | <=0.1.14 | |
| Freedesktop Colord | =0.1.1 | |
| redhat/colord-0.1.15 | <1. | 1. |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://gitorious.org/colord/master/commit/36549e0ed255e7dfa7852d08a75dd5f00cbd270e
- http://secunia.com/advisories/46940
- http://gitorious.org/colord/master/commit/1fadd90afcb4bbc47513466ee9bb1e4a8632ac3b
- http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070518.html
- https://bugzilla.redhat.com/show_bug.cgi?id=757171
- http://www.securityfocus.com/bid/50814
- http://www.openwall.com/lists/oss-security/2011/11/25/3
- http://secunia.com/advisories/47160
- https://bugs.freedesktop.org/show_bug.cgi?id=42904
- http://ubuntu.com/usn/usn-1289-1
- http://www.openwall.com/lists/oss-security/2011/11/25/4
- http://lists.fedoraproject.org/pipermail/package-announce/2011-December/070450.html
- https://bugzilla.novell.com/show_bug.cgi?id=698250
- http://www.openwall.com/lists/oss-security/2011/11/25/1
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=757173
- https://access.redhat.com/security/cve/CVE-2011-4349
- https://admin.fedoraproject.org/updates/colord-0.1.15-1.fc15
- https://admin.fedoraproject.org/updates/colord-0.1.15-1.fc16
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=757171#c4
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/remedy
- agent/severity
- agent/last-modified-date
- agent/tags
- agent/weakness
- agent/description
- agent/event
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-4349
- agent/software-canonical-lookup
- vendor/freedesktop
- canonical/freedesktop colord
- version/freedesktop colord/0.1.10
- version/freedesktop colord/0.1.4
- version/freedesktop colord/0.1.8
- version/freedesktop colord/0.1.7
- version/freedesktop colord/0.1.12
- version/freedesktop colord/0.1.5
- version/freedesktop colord/0.1.13
- version/freedesktop colord/0.1.3
- version/freedesktop colord/0.1.2
- version/freedesktop colord/0.1.9
- version/freedesktop colord/0.1.6
- version/freedesktop colord/0.1.11
- version/freedesktop colord/0.1.0
- version/freedesktop colord/0.1.14
- version/freedesktop colord/0.1.1
- package-manager/redhat