CVE-2013-4325

The checkpermissionv1 function in base/pkit.py in HP Linux Imaging and Printing HPLIP through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race conditio...

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1064

apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2...

CVE-2013-4326

RealtimeKit aka rtkit 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to...

CVE-2013-1062

ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

Fedora 19 : lightdm-1.6.2-1.fc19 (2013-16388)

New stable bugfix, security release: include : - Correctly set permissions on Xauthority file. - Fix bug where seat failure before D-Bus acquired would not stop daemon - Stop using gfilesetcontents - it can leave intermediate files around See also:...

Amazon Linux AMI : dbus (ALAS-2012-128)

It was discovered that the D-Bus library honored environment settings even when running with elevated privileges. A local attacker could possibly use this flaw to escalate their privileges, by setting specific environment variables before running a setuid or setgid application linked against the...

GLSA-201308-02 : D-Bus: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201308-02 D-Bus: Denial of Service D-Bus dbusprintfstringupperbound function crashes if it returns exactly 1024 bytes. Impact : A local attacker could provide specially crafted input to an application using D-Bus which would cause...

D-Bus: Denial of service

Background D-Bus is a message bus system which processes can use to talk to each other. Description D-Bus’ dbusprintfstringupperbound function crashes if it returns exactly 1024 bytes. Impact A local attacker could provide specially-crafted input to an application using D-Bus which would cause...

Fedora Update for dbus-glib FEDORA-2013-12156

Check for the Version of dbus-glib OpenVAS Vulnerability Test Fedora Update for dbus-glib FEDORA-2013-12156 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 18 Update: dbus-glib-0.100-3.fc18

D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop...

Oracle Linux 4 : NetworkManager (ELSA-2009-0362)

From Red Hat Security Advisory 2009:0362 : Updated NetworkManager packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. NetworkManager is a network link manager that...

Oracle Linux 5 : Moderate: / dbus (ELSA-2008-0159)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2008-0159 advisory. 1.0.0-6.3.el51 - CVE-2008-0595: D-Bus security policy circumvention - Resolves: 432437 1.0.0-6.el51 - CVE-2006-6107: D-Bus denial of service - Resolves: 219601...

Oracle Linux 4 : dbus (ELSA-2007-0008)

From Red Hat Security Advisory 2007:0008 : Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...

[SECURITY] Fedora 19 Update: dbus-glib-0.100-5.fc19

D-Bus add-on library to integrate the standard D-Bus library with the GLib thread abstraction and main loop...

CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

CVE-2013-2168

CVE-2013-2168 affects D-Bus (DBus) where the _dbus_printf_string_upper_bound function in dbus-sysdeps-unix.c can crash the service. A crafted message can cause a local denial of service (service crash). The advisory covers DBus 1.4.x < 1.4.26, 1.6.x < 1.6.12, and 1.7.x

CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...

CVE-2013-2168

The dbusprintfstringupperbound function in dbus/dbus-sysdeps-unix.c in D-Bus aka DBus 1.4.x before 1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service service crash via a crafted message...