Description
The default configuration in mate-settings-daemon 1.5.3 allows local users to change the timezone for the system via a crafted D-Bus call.
References
- FEDORA-2013-2766 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=878102
- FEDORA-2013-2784 vendor-advisory