2 matches found
oddjob path traversal vulnerability
oddjob is a software package for D-Bus with public gateway interface functionality. A path traversal vulnerability exists in the mkhomedir tool in versions of oddjob prior to 0.34.5 and prior to 0.34.6, which stems from the fact that during the creation of a home directory, mkhomedir copies the...
CVE-2014-3635
Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a 64-bit system and the maxmessageunixfds limit is set to an odd number, allows local users to cause a denial of service dbus-daemon crash or possibly execute arbitrary code by sending one more fil...