D-Bus vulnerability

2009-07-1300:00:00

ubuntu.com

7.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

80.4%

JSON

Releases

Ubuntu 9.04
Ubuntu 8.10
Ubuntu 8.04
Ubuntu 6.06

Packages

dbus -

Details

It was discovered that the D-Bus library did not correctly validate
signatures. If a local user sent a specially crafted D-Bus key, they could
spoof a valid signature and bypass security policies.

OSVersionArchitecturePackageVersionFilename
Ubuntu9.04noarchlibdbus-1-3< 1.2.12-0ubuntu2.1UNKNOWN
Ubuntu9.04noarchdbus< 1.2.12-0ubuntu2.1UNKNOWN
Ubuntu9.04noarchdbus-x11< 1.2.12-0ubuntu2.1UNKNOWN
Ubuntu9.04noarchlibdbus-1-dev< 1.2.12-0ubuntu2.1UNKNOWN
Ubuntu8.10noarchlibdbus-1-3< 1.2.4-0ubuntu1.1UNKNOWN
Ubuntu8.10noarchdbus< 1.2.4-0ubuntu1.1UNKNOWN
Ubuntu8.10noarchdbus-x11< 1.2.4-0ubuntu1.1UNKNOWN
Ubuntu8.10noarchlibdbus-1-dev< 1.2.4-0ubuntu1.1UNKNOWN
Ubuntu8.04noarchlibdbus-1-3< 1.1.20-1ubuntu3.3UNKNOWN
Ubuntu8.04noarchdbus< 1.1.20-1ubuntu3.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	9.04	noarch	libdbus-1-3	< 1.2.12-0ubuntu2.1	UNKNOWN
Ubuntu	9.04	noarch	dbus	< 1.2.12-0ubuntu2.1	UNKNOWN
Ubuntu	9.04	noarch	dbus-x11	< 1.2.12-0ubuntu2.1	UNKNOWN
Ubuntu	9.04	noarch	libdbus-1-dev	< 1.2.12-0ubuntu2.1	UNKNOWN
Ubuntu	8.10	noarch	libdbus-1-3	< 1.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	dbus	< 1.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	dbus-x11	< 1.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	8.10	noarch	libdbus-1-dev	< 1.2.4-0ubuntu1.1	UNKNOWN
Ubuntu	8.04	noarch	libdbus-1-3	< 1.1.20-1ubuntu3.3	UNKNOWN
Ubuntu	8.04	noarch	dbus	< 1.1.20-1ubuntu3.3	UNKNOWN