4.6
CVE-2008-4311
- EPSS 0.04%
- Veröffentlicht 10.12.2008 00:30:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freedesktop ≫ Dbus Version <= 1.2.4
Freedesktop ≫ Dbus Version0.1
Freedesktop ≫ Dbus Version0.2
Freedesktop ≫ Dbus Version0.3
Freedesktop ≫ Dbus Version0.4
Freedesktop ≫ Dbus Version0.5
Freedesktop ≫ Dbus Version0.6
Freedesktop ≫ Dbus Version0.7
Freedesktop ≫ Dbus Version0.8
Freedesktop ≫ Dbus Version0.9
Freedesktop ≫ Dbus Version0.10
Freedesktop ≫ Dbus Version0.11
Freedesktop ≫ Dbus Version0.12
Freedesktop ≫ Dbus Version0.13
Freedesktop ≫ Dbus Version0.20
Freedesktop ≫ Dbus Version0.21
Freedesktop ≫ Dbus Version0.22
Freedesktop ≫ Dbus Version0.23
Freedesktop ≫ Dbus Version0.23.1
Freedesktop ≫ Dbus Version0.23.2
Freedesktop ≫ Dbus Version0.23.3
Freedesktop ≫ Dbus Version0.31
Freedesktop ≫ Dbus Version0.32
Freedesktop ≫ Dbus Version0.33
Freedesktop ≫ Dbus Version0.34
Freedesktop ≫ Dbus Version0.35
Freedesktop ≫ Dbus Version0.35.1
Freedesktop ≫ Dbus Version0.35.2
Freedesktop ≫ Dbus Version0.36
Freedesktop ≫ Dbus Version0.36.1
Freedesktop ≫ Dbus Version0.36.2
Freedesktop ≫ Dbus Version0.50
Freedesktop ≫ Dbus Version0.60
Freedesktop ≫ Dbus Version0.61
Freedesktop ≫ Dbus Version0.62
Freedesktop ≫ Dbus Version0.90
Freedesktop ≫ Dbus Version0.91
Freedesktop ≫ Dbus Version0.92
Freedesktop ≫ Dbus Version1.0
Freedesktop ≫ Dbus Version1.0 Updaterc1
Freedesktop ≫ Dbus Version1.0 Updaterc2
Freedesktop ≫ Dbus Version1.0 Updaterc3
Freedesktop ≫ Dbus Version1.1.0
Freedesktop ≫ Dbus Version1.1.1
Freedesktop ≫ Dbus Version1.1.2
Freedesktop ≫ Dbus Version1.1.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.101 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 3.9 | 6.4 |
AV:L/AC:L/Au:N/C:P/I:P/A:P
|