CVE-2012-2095
WICD < 1.7.2 - Unauthenticated Privilege Escalation via D-Bus SetWiredProperty
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-2095. PoCs published by anonymous.
AI-analyzed exploit summary This exploit targets a vulnerability in WICD <= 1.7.1, allowing arbitrary script execution as root by manipulating wireless network properties via D-Bus. The exploit sets a malicious 'beforescript' property and triggers it by connecting to a network.
Description
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.
Exploits (1)
This exploit targets a vulnerability in WICD <= 1.7.1, allowing arbitrary script execution as root by manipulating wireless network properties via D-Bus. The exploit sets a malicious 'beforescript' property and triggers it by connecting to a network.