CVE-2011-1828

usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command...

SuSE 10 Security Update : dbus (ZYPP Patch Number 7483)

Local users could crash the D-Bus daemon by sending a specially crafted message CVE-2010-4352. This update also properly fixes CVE-2008-3834 / CVE-2009-1189. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'...

Fedora Update for dbus FEDORA-2010-19178

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CentOS 5 : dbus (CESA-2011:0376)

Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

dbus security update

CentOS Errata and Security Advisory CESA-2011:0376 Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

(RHSA-2011:0439) Moderate: rhev-hypervisor security and bug fix update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...

RedHat Update for dbus RHSA-2011:0376-01

Check for the Version of dbus OpenVAS Vulnerability Test RedHat Update for dbus RHSA-2011:0376-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

RedHat Update for dbus RHSA-2011:0376-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian: Security Advisory (DSA-2149-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2149-1 (dbus)

The remote host is missing an update to dbus announced via advisory DSA 2149-1. OpenVAS Vulnerability Test $Id: deb21491.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2149-1 dbus Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

SuSE 11.1 Security Update : dbus (SAT Patch Number 3941)

Local users could crash the D-Bus daemon by sending a specially crafted message. CVE-2010-4352 Also RPM requirements were adjusted to make appliance installations work better. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracte...

Ubuntu Update for dbus vulnerability USN-1044-1

Ubuntu Update for Linux kernel vulnerabilities USN-1044-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10441.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for dbus vulnerability USN-1044-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...

SuSE 11.1 Security Update : NetworkManager (SAT Patch Number 3103)

dbus-glib allowed local users to write properties that were exported read-only via dbus. CVE-2010-1172 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell,...

Ubuntu: Security Advisory (USN-1044-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 11.1 Security Update : GDM (SAT Patch Number 3222)

This update provides the following fixes : - 633655: Change the way dbus properties are exported to avoid write access to read-only properties. - 627893: Upon relogin gdm displays the Windows domain, but tries to authenticate locally - 490621: Windows domain not remembered from previous log-in -...

Debian DSA-2149-1 : dbus - denial of service

Remi Denis-Courmont discovered that dbus, a message bus application, is not properly limiting the nesting level when examining messages with extensive nested variants. This allows an attacker to crash the dbus system daemon due to a call stack overflow via crafted messages. %NASLMINLEVEL 70300 C...

[SECURITY] [DSA 2149-1] Security update for dbus

--------------------------------------------------------------------------- Debian Security Advisory DSA-2149-1 [email protected] http://www.debian.org/security/ Nico Golde January 20, 2011 http://www.debian.org/security/faq -...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : dbus vulnerability (USN-1044-1)

Remi Denis-Courmont discovered that D-Bus did not properly validate the number of nested variants when validating D-Bus messages. A local attacker could exploit this to cause a denial of service. Note that Tenable Network Security has extracted the preceding description block directly from the...

Stack overflow

Stack consumption vulnerability in D-Bus aka DBus before 1.4.1 allows local users to cause a denial of service daemon crash via a message containing many nested variants...

CVE-2010-4352

CVE-2010-4352 is a stack-consumption vulnerability in D-Bus (DBus) prior to 1.4.1 that allows a local attacker to crash the D-Bus daemon by sending a message with many nested variants. The connected advisories (MiracleLinux AXSA, openSUSE/SUSE, Oracle/etc.) confirm D-BUS as the affected component...