UbuntuUSN-653-1D-Bus vulnerabilities
6.2 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.0%
Releases
- Ubuntu 8.04
- Ubuntu 7.10
- Ubuntu 7.04
- Ubuntu 6.06
Packages
- dbus -
Details
Havoc Pennington discovered that the D-Bus daemon did not correctly
validate certain security policies. If a local user sent a specially
crafted D-Bus request, they could bypass security policies that had a
“send_interface” defined. (CVE-2008-0595)
It was discovered that the D-Bus library did not correctly validate
certain corrupted signatures. If a local user sent a specially crafted
D-Bus request, they could crash applications linked against the D-Bus
library, leading to a denial of service. (CVE-2008-3834)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | libdbus-1-3 | < 1.1.20-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | dbus | < 1.1.20-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | dbus-x11 | < 1.1.20-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | libdbus-1-dev | < 1.1.20-1ubuntu3.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libdbus-1-3 | < 1.1.1-3ubuntu4.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | dbus | < 1.1.1-3ubuntu4.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | dbus-x11 | < 1.1.1-3ubuntu4.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | libdbus-1-dev | < 1.1.1-3ubuntu4.2 | UNKNOWN |
| Ubuntu | 7.04 | noarch | libdbus-1-3 | < 1.0.2-1ubuntu4.2 | UNKNOWN |
| Ubuntu | 7.04 | noarch | dbus | < 1.0.2-1ubuntu4.2 | UNKNOWN |
Related
6.2 Medium
AI Score
Confidence
Low
4.6 Medium
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.012 Low
EPSS
Percentile
85.0%