D-Bus send_interface属性绕过安全策略漏洞

BUGTRAQ ID: 28023 CVECAN ID: CVE-2008-0595 D-BUS是一个设计目标为应用程序间通信的消息总线系统。 在评估是否应执行某一调用时，总线守护程序会查找安全策略来判断是否允许调用程序访问该调用。很多dbus服务的安全策略中包含有类似于以下的行： allow sendinterface="some.interface.WithMethods"/...

bind security, bug fix, and enhancement update

30:9.3.4-6.P1 - final 5.2 version - minor changes in initscript - improved patches for 250744 and 250901 30:9.3.4-5.P1 - improved patch to handle D-BUS races 240876 - updated named.root zone to affect root IPv6 migration 30:9.3.4-4.P1 - improved fix for 253537, posttrans script is now used - do n...

RHEL 5 : setroubleshoot (RHSA-2008:0061)

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

Moderate: Red Hat Security Advisory: bind security, bug fix, and enhancement update

Updated bind packages that fix two security issues, several bugs, and add enhancements are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Berkeley Internet Name Domain BIND is an implementation...

Moderate: Red Hat Security Advisory: setroubleshoot security and bug fix update

Updated setroubleshoot packages that fix two security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The setroubleshoot packages provide tools to help diagnose SELinux...

dbus security update

CentOS Errata and Security Advisory CESA-2008:0159 Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between...

CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

Null pointer dereference

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

CVE-2008-0595

CVE-2008-0595 affects dbus-daemon in D-Bus prior to 1.0.3 and in 1.1.x prior to 1.1.20, where send_interface attributes in security policy are recognized only for fully qualified method calls. This allows a local user to bypass intended access restrictions by making a method call with a NULL inte...

CVE-2008-0595

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes sendinterface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface...

[SECURITY] Fedora 8 Update: dbus-1.1.2-9.fc8

D-BUS is a system for sending messages between applications. It is used both for the systemwide message bus service, and as a per-user-login-session messaging facility...

[SECURITY] Fedora 7 Update: dbus-1.0.2-7.fc7

D-BUS is a system for sending messages between applications. It is used both for the systemwide message bus service, and as a per-user-login-session messaging facility...

Moderate: dbus security update

1.0.0-6.3.el51 - CVE-2008-0595: D-Bus security policy circumvention - Resolves: 432437 1.0.0-6.el51 - CVE-2006-6107: D-Bus denial of service - Resolves: 219601...

D-Bus 'send_interface'属性安全策略绕过漏洞

BUGTRAQ ID: 28023 CVE ID:CVE-2008-0595 CNCVE ID:CNCVE-20080595 D-Bus是一款进程间通信IPC实现。用于在应用程序间发送消息。 D-Bus使用的安全策略存在问题，本地攻击者可以利用漏洞连接D-Bus守护程序执行本身没有权限访问的部分方法调用。 当评估是否能调用方法调用，bus守护程序会查看安全策略然后尝试判断是否调用者允许访问方法调用。 多个dbus服务以如下安全策略形式存在： allow sendinterface="some.interface.WithMethods"/ 来精确的列出特定接口方法的白名单。...

Moderate: Red Hat Security Advisory: dbus security update

Updated dbus packages that fix an issue with circumventing the security policy are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-Bus is a system for sending messages between applications. It is used both for the system-wide...

SuSE 10 Security Update : avahi (ZYPP Patch Number 3845)

Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Ubuntu 5.10 / 6.06 LTS / 6.10 : dbus vulnerability (USN-401-1)

Kimmo Hamalainen discovered that local users could delete other users' D-Bus match rules. Applications would stop receiving D-Bus messages, resulting in a local denial of service, and potential data loss for applications that depended on D-Bus for storing information. Note that Tenable Network...

openSUSE 10 Security Update : avahi (avahi-3846)

Local attackers could send empty TXT data via D-BUS, causing the avahi daemon to exit. CVE-2007-3372 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update avahi-3846...