martin carpenter

contents

enlightenment sysactions vulnerability

2014/01/20

tags: enlightenment vulnerability CVE-2014-1845 CVE-2014-1846

summary

The sysactions setuid helper of the Enlightenment window manager was found to not sanitize its environment correctly and to ship with a weak default configuration. This could permit privilege escalation to root.

This was efficiently fixed by the maintainer in under a week, using clearenv(3) where available (and a blacklist where not), and with a tightened default configuration to be adjusted by individual distro maintainers.

timeline

• 2013/11/30 Reported to Enlightenment maintainer
• 2013/12/04 Fixed in 0.17.6
• 2013/12/21 Fixed in 0.18.0
• 2014/01/29 Red Hat bug 1059410
• 2014/02/03 CVE-2014-1845 and CVE-2014-1846 assigned