DBus regressions

2012-10-0400:00:00

ubuntu.com

6 Medium

AI Score

Confidence

High

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

13.3%

JSON

Releases

Ubuntu 12.04
Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
Ubuntu 8.04

Packages

dbus - simple interprocess messaging system

Details

USN-1576-1 fixed vulnerabilities in DBus. The update caused a regression
for certain services launched from the activation helper, and caused an
unclean shutdown on upgrade. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Sebastian Krahmer discovered that DBus incorrectly handled environment
variables when running with elevated privileges. A local attacker could
possibly exploit this flaw with a setuid binary and gain root privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.04noarchdbus< 1.1.20-1ubuntu3.9UNKNOWN
Ubuntu8.04noarchdbus-x11< 1.1.20-1ubuntu3.9UNKNOWN
Ubuntu8.04noarchlibdbus-1-3< 1.1.20-1ubuntu3.9UNKNOWN
Ubuntu8.04noarchlibdbus-1-dev< 1.1.20-1ubuntu3.9UNKNOWN
Ubuntu12.04noarchdbus< 1.4.18-1ubuntu1.3UNKNOWN
Ubuntu12.04noarchdbus-1-dbg< 1.4.18-1ubuntu1.3UNKNOWN
Ubuntu12.04noarchdbus-x11< 1.4.18-1ubuntu1.3UNKNOWN
Ubuntu12.04noarchlibdbus-1-3< 1.4.18-1ubuntu1.3UNKNOWN
Ubuntu12.04noarchlibdbus-1-dev< 1.4.18-1ubuntu1.3UNKNOWN
Ubuntu11.10noarchdbus< 1.4.14-1ubuntu1.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.04	noarch	dbus	< 1.1.20-1ubuntu3.9	UNKNOWN
Ubuntu	8.04	noarch	dbus-x11	< 1.1.20-1ubuntu3.9	UNKNOWN
Ubuntu	8.04	noarch	libdbus-1-3	< 1.1.20-1ubuntu3.9	UNKNOWN
Ubuntu	8.04	noarch	libdbus-1-dev	< 1.1.20-1ubuntu3.9	UNKNOWN
Ubuntu	12.04	noarch	dbus	< 1.4.18-1ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	dbus-1-dbg	< 1.4.18-1ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	dbus-x11	< 1.4.18-1ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	libdbus-1-3	< 1.4.18-1ubuntu1.3	UNKNOWN
Ubuntu	12.04	noarch	libdbus-1-dev	< 1.4.18-1ubuntu1.3	UNKNOWN
Ubuntu	11.10	noarch	dbus	< 1.4.14-1ubuntu1.3	UNKNOWN