Fedora Core 6 : dbus-1.0.1-8.fc6 (2006-1475)

Kimmo Hamalainen reported a DoS flaw in D-Bus that can cause a local user to disable the the ability of another process to receive certain messages. This flaw does not contain any potential for arbitrary code execution. Note that Tenable Network Security has extracted the preceding description...

USN-401-1: D-Bus vulnerability

Kimmo Hämäläinen discovered that local users could delete other users' D-Bus match rules. Applications would stop receiving D-Bus messages, resulting in a local denial of service, and potential data loss for applications that depended on D-Bus for storing information...

D-Bus cross-application messaging system DoS

Vulnerability in matchruleequal allows application to remove rules of different applications...

[ MDKSA-2006:233 ] - Updated dbus packages fix vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:233 http://www.mandriva.com/security/ Package : dbus Date : December 18, 2006 Affected: 2006.0, 2007.0, Corporate 3.0, Corporate 4.0 Problem Description: A vulnerability was discovered in D-Bus that could be...

D-Bus signals.c本地拒绝服务漏洞

D-BUS是一个设计目标为应用程序间通信的消息总线系统。 D-BUS的实现上存在拒绝服务漏洞，本地攻击者可能利用此漏洞导致特定的进程无法收到特定的消息，使用户不能使用系统。 D-BUS代码中的matchruleequal函数可能导致删除其他连接的匹配关系，这样某些进程就可能无法接收消息。 D-Bus D-Bus = 1.0.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://dbus.freedesktop.org/releases/dbus/dbus-1.0.2.tar.gz...

CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

DEBIAN-CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

CVE-2006-6107

D-Bus vulnerability CVE-2006-6107: An unspecified flaw in match_rule_equal (bus/signals.c) affects D-Bus pre-1.0.2, enabling local attackers to remove match rules for other apps and cause a denial of service (lost process messages). The provided documents do not specify a fixed version or remedia...

CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

CVE-2006-6107

Unspecified vulnerability in the matchruleequal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service lost process messages...

dbus -- match_rule_equal() Weakness

Secunia reports: D-Bus have a weakness, which can be exploited by malicious, local users to cause a DoS Denial of Service. An error within the "matchruleequal" function can be exploited to disable the ability of other processes to receive messages by removing their matches from D-Bus...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-0201

D-BUS dbus before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket...

CVE-2005-0201

CVE-2005-0201 affects D-BUS (dbus) before 0.22, where insufficient socket access restriction allows a local user to listen to or send arbitrary messages on another user’s per-user session bus if the socket address is known. This is a local-privilege/confidentiality issue. Connected advisories ind...

Mandrake Linux Security Advisory : dbus (MDKSA-2005:105)

Dan Reed discovered a vulnerability in the D-BUS system for sending messages between applications. He found that a user can send and listen to messages on another user's per-user session bus if they knew the address of the socket. The updated packages have been patched to correct this problem...

dbus security update

CentOS Errata and Security Advisory CESA-2005:102 Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having low security impact by the Red Hat Security Response Team. D-BUS is a system for sending messages between...