DBus vulnerability

2012-09-2000:00:00

ubuntu.com

5.8 Medium

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

13.3%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
Ubuntu 8.04

Packages

dbus - simple interprocess messaging system

Details

Sebastian Krahmer discovered that DBus incorrectly handled environment
variables when running with elevated privileges. A local attacker could
possibly exploit this flaw with a setuid binary and gain root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchdbus< 1.1.20-1ubuntu3.7UNKNOWN
Ubuntu8.04noarchdbus-x11< 1.1.20-1ubuntu3.7UNKNOWN
Ubuntu8.04noarchlibdbus-1-3< 1.1.20-1ubuntu3.7UNKNOWN
Ubuntu8.04noarchlibdbus-1-dev< 1.1.20-1ubuntu3.7UNKNOWN
Ubuntu12.04noarchdbus< 1.4.18-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchdbus-1-dbg< 1.4.18-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchdbus-x11< 1.4.18-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibdbus-1-3< 1.4.18-1ubuntu1.1UNKNOWN
Ubuntu12.04noarchlibdbus-1-dev< 1.4.18-1ubuntu1.1UNKNOWN
Ubuntu11.10noarchdbus< 1.4.14-1ubuntu1.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	dbus	< 1.1.20-1ubuntu3.7	UNKNOWN
Ubuntu	8.04	noarch	dbus-x11	< 1.1.20-1ubuntu3.7	UNKNOWN
Ubuntu	8.04	noarch	libdbus-1-3	< 1.1.20-1ubuntu3.7	UNKNOWN
Ubuntu	8.04	noarch	libdbus-1-dev	< 1.1.20-1ubuntu3.7	UNKNOWN
Ubuntu	12.04	noarch	dbus	< 1.4.18-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	dbus-1-dbg	< 1.4.18-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	dbus-x11	< 1.4.18-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	libdbus-1-3	< 1.4.18-1ubuntu1.1	UNKNOWN
Ubuntu	12.04	noarch	libdbus-1-dev	< 1.4.18-1ubuntu1.1	UNKNOWN
Ubuntu	11.10	noarch	dbus	< 1.4.14-1ubuntu1.1	UNKNOWN