CVE-2012-3524

libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications that do not cleanse environment variables, not in libdbus itself: "we do not support use of libdbus in setuid binaries that do not sanitize their environment before their first call into libdbus."

• CWE-264

• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html
• http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
• http://rhn.redhat.com/errata/RHSA-2012-1261.html
• http://secunia.com/advisories/50537Vendor Advisory
• http://secunia.com/advisories/50544
• http://secunia.com/advisories/50710
• http://stealth.openwall.net/null/dzug.cExploit
• http://www.exploit-db.com/exploits/21323Exploit
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:070
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:083
• http://www.openwall.com/lists/oss-security/2012/07/10/4
• http://www.openwall.com/lists/oss-security/2012/07/26/1
• http://www.openwall.com/lists/oss-security/2012/09/12/6
• http://www.openwall.com/lists/oss-security/2012/09/14/2
• http://www.openwall.com/lists/oss-security/2012/09/17/2
• http://www.securityfocus.com/bid/55517Exploit
• http://www.ubuntu.com/usn/USN-1576-1
• http://www.ubuntu.com/usn/USN-1576-2
• https://bugs.freedesktop.org/show_bug.cgi?id=52202Patch
• https://bugzilla.novell.com/show_bug.cgi?id=697105
• https://bugzilla.redhat.com/show_bug.cgi?id=847402
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00009.html
• http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00015.html
• http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00000.html
• http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
• http://rhn.redhat.com/errata/RHSA-2012-1261.html
• http://secunia.com/advisories/50537Vendor Advisory
• http://secunia.com/advisories/50544
• http://secunia.com/advisories/50710
• http://stealth.openwall.net/null/dzug.cExploit
• http://www.exploit-db.com/exploits/21323Exploit
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:070
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:083
• http://www.openwall.com/lists/oss-security/2012/07/10/4
• http://www.openwall.com/lists/oss-security/2012/07/26/1
• http://www.openwall.com/lists/oss-security/2012/09/12/6
• http://www.openwall.com/lists/oss-security/2012/09/14/2
• http://www.openwall.com/lists/oss-security/2012/09/17/2
• http://www.securityfocus.com/bid/55517Exploit
• http://www.ubuntu.com/usn/USN-1576-1
• http://www.ubuntu.com/usn/USN-1576-2
• https://bugs.freedesktop.org/show_bug.cgi?id=52202Patch
• https://bugzilla.novell.com/show_bug.cgi?id=697105
• https://bugzilla.redhat.com/show_bug.cgi?id=847402

Published

Sep 18, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-3518The networkstatus_parse_vote_from_string function in routerp…
• CVE-2012-3519routerlist.c in Tor before 0.2.2.38 uses a different amount …
• CVE-2012-3520The Netlink implementation in the Linux kernel before 3.2.30…
• CVE-2012-3521Multiple directory traversal vulnerabilities in the cssgen c…
• CVE-2012-3522Cross-site scripting (XSS) vulnerability in contrib/langwiz.…
• CVE-2012-3523The STARTTLS implementation in nnrpd in INN before 2.5.3 doe…
• CVE-2012-3525s2s/out.c in jabberd2 2.2.16 and earlier does not verify tha…
• CVE-2012-3526The reverse proxy add forward module (mod_rpaf) 0.5 and 0.6 …
• CVE-2012-3527view_help.php in the backend help system in TYPO3 4.5.x befo…
• CVE-2012-3528Multiple cross-site scripting (XSS) vulnerabilities in the b…
• CVE-2012-3529The configuration module in the backend in TYPO3 4.5.x befor…
• CVE-2012-3530Incomplete blacklist vulnerability in the t3lib_div::quoteJS…