D-Bus vulnerability

2007-01-0400:00:00

ubuntu.com

6.2 Medium

AI Score

Confidence

Low

1.7 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:N/I:N/A:P

0.018 Low

EPSS

Percentile

88.0%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

Kimmo Hämäläinen discovered that local users could delete other users’
D-Bus match rules. Applications would stop receiving D-Bus messages,
resulting in a local denial of service, and potential data loss for
applications that depended on D-Bus for storing information.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchdbus< 0.93-0ubuntu3.1UNKNOWN
Ubuntu6.06noarchdbus< 0.60-6ubuntu8.1UNKNOWN
Ubuntu5.10noarchdbus< 0.36.2-0ubuntu7.1UNKNOWN