CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app.

CVSS v3 3.9 LOW
CVSS v2.0 4.3 MEDIUM

3.9^/10

CVSS v3 : LOW

Vector : AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N

Exploitability : 0.3 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212	Third Party Advisory
https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*

History

21 Nov 2024, 02:25

Type	Values Removed	Values Added
CVSS	v2 : ~~4.3~~ v3 : ~~7.8~~	v2 : 4.3 v3 : 3.9
References	~~() https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212 - Third Party Advisory~~	() https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212 - Third Party Advisory

Information

Published : 2019-04-22 16:29

Updated : 2024-11-21 02:25

NVD link : CVE-2015-1327

Mitre link : CVE-2015-1327

CVE.ORG link : CVE-2015-1327

JSON object : View

Products Affected

canonical

ubuntu_linux

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2015-1327", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Secondary", "source": "security@ubuntu.com", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 3.9, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 0.3}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2019-04-22T16:29:00.833", "references": [{"url": "https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212", "tags": ["Third Party Advisory"], "source": "security@ubuntu.com"}, {"url": "https://bazaar.launchpad.net/~phablet-team/content-hub/trunk/revision/212", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which would then send a copy of that file to another app."}, {"lang": "es", "value": "Centro de contenido anterior a la versi\u00f3n 0.0 + 15.04.20150331-0ubuntu 1.0 DBUS API solo requiere un path de acceso de archivo para un elemento de contenido, en realidad no requiere que la aplicaci\u00f3n confinada tenga acceso al archivo para crear una transferencia. Esto podr\u00eda permitir que una aplicaci\u00f3n maliciosa utilizando la API DBUS para exportar file:///etc/passwd que luego enviar\u00eda una copia de ese archivo a otra aplicaci\u00f3n."}], "lastModified": "2024-11-21T02:25:10.577", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:15.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F38D3B7E-8429-473F-BB31-FC3583EE5A5B"}], "operator": "OR"}]}], "sourceIdentifier": "security@ubuntu.com"}