CVE-2016-5410
published 2017-04-19CVE-2016-5410: firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2)…
PriorityP425medium5.5CVSS 3.0
AVLACLPRLUINSUCNIHAN
EPSS
0.36%
29.0th percentile
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | firewalld | < firewalld 0.4.3.3-1 (bookworm) | firewalld 0.4.3.3-1 (bookworm) |
| firewalld | firewalld | <= 0.4.3.2 | — |
| firewalld | firewalld | >= 0 < 0.4.3.3-1 | 0.4.3.3-1 |
| firewalld | firewalld | >= 0 < 0.4.3.3-1 | 0.4.3.3-1 |
| firewalld | firewalld | >= 0 < 0.4.3.3-1 | 0.4.3.3-1 |
| firewalld | firewalld | >= 0 < 0.4.3.3-1 | 0.4.3.3-1 |
| redhat | enterprise_linux_desktop | — | — |
| redhat | enterprise_linux_hpc_node | — | — |
| redhat | enterprise_linux_server | — | — |
| redhat | enterprise_linux_workstation | — | — |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v2vf-88f9-4px7: firewalld
ghsa_unreviewed·2022-05-17
CVE-2016-5410 [MEDIUM] CWE-287 GHSA-v2vf-88f9-4px7: firewalld
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
OSV
CVE-2016-5410: firewalld
osv·2017-04-19·CVSS 5.5
CVE-2016-5410 [MEDIUM] CVE-2016-5410: firewalld
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
Red Hat
firewalld: Firewall configuration can be modified by any logged in user
vendor_redhat·2016-08-16·CVSS 5.5
CVE-2016-5410 [MEDIUM] CWE-306 firewalld: Firewall configuration can be modified by any logged in user
firewalld: Firewall configuration can be modified by any logged in user
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
A flaw was found in the way firewalld allowed certain firewall configurations to be modified by unauthenticated users. Any locally logged in user could use this flaw to tamper or change firewall settings.
Debian
CVE-2016-5410: firewalld - firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentica...
vendor_debian·2016·CVSS 5.5
CVE-2016-5410 [MEDIUM] CVE-2016-5410: firewalld - firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentica...
firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the (1) addPassthrough, (2) removePassthrough, (3) addEntry, (4) removeEntry, or (5) setEntries D-Bus API method.
Scope: local
bookworm: resolved (fixed in 0.4.3.3-1)
bullseye: resolved (fixed in 0.4.3.3-1)
forky: resolved (fixed in 0.4.3.3-1)
sid: resolved (fixed in 0.4.3.3-1)
trixie: resolved (fixed in 0.4.3.3-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user [fedora-all]
bugzilla·2016-08-16·CVSS 5.5
CVE-2016-5410 [MEDIUM] CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user [fedora-all]
CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple s
Bugzilla
CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user
bugzilla·2016-07-26·CVSS 5.5
CVE-2016-5410 [MEDIUM] CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user
CVE-2016-5410 firewalld: Firewall configuration can be modified by any logged in user
FirewallD provides dbus api for modification of configuration after user has been authenticated via polkit. This does not apply for 5 methods which can be called by any logged user using dbus api or firewall-cmd cli interface. Any predefined policy can be used, server or desktop.
list of concerned dbus methods in firewalld.py
addPassthrough
removePassthrough
addEntry
removeEntry
setEntries
Any locally logged in user, could use the above firewalld commands to tamper or change the firewall settings.
This flaw was introduced via the following commit:
https://github.com/t-woerner/firewalld/commit/6b9867cd5c5e2c83adeec42666521a420e59ef11
It affects all firewalld versions since 0.3.12
Discussion:
Created
http://rhn.redhat.com/errata/RHSA-2016-2597.htmlhttp://www.firewalld.org/2016/08/firewalld-0-4-3-3-releasehttp://www.openwall.com/lists/oss-security/2016/08/16/3http://www.securityfocus.com/bid/92481https://bugzilla.redhat.com/show_bug.cgi?id=1360135https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/https://security.gentoo.org/glsa/201701-70http://rhn.redhat.com/errata/RHSA-2016-2597.htmlhttp://www.firewalld.org/2016/08/firewalld-0-4-3-3-releasehttp://www.openwall.com/lists/oss-security/2016/08/16/3http://www.securityfocus.com/bid/92481https://bugzilla.redhat.com/show_bug.cgi?id=1360135https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPM3GUQRU2KPRXDEQLAMCDQEAIARJSBT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZBJMYLGRVKIPJEI3VZJ4WQZT7FBQ5BKO/https://security.gentoo.org/glsa/201701-70
2017-04-19
Published