4.6

CVE-2008-4311

The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freedesktop ≫ Dbus Version <= 1.2.4
Freedesktop ≫ Dbus Version 0.1
Freedesktop ≫ Dbus Version 0.2
Freedesktop ≫ Dbus Version 0.3
Freedesktop ≫ Dbus Version 0.4
Freedesktop ≫ Dbus Version 0.5
Freedesktop ≫ Dbus Version 0.6
Freedesktop ≫ Dbus Version 0.7
Freedesktop ≫ Dbus Version 0.8
Freedesktop ≫ Dbus Version 0.9
Freedesktop ≫ Dbus Version 0.10
Freedesktop ≫ Dbus Version 0.11
Freedesktop ≫ Dbus Version 0.12
Freedesktop ≫ Dbus Version 0.13
Freedesktop ≫ Dbus Version 0.20
Freedesktop ≫ Dbus Version 0.21
Freedesktop ≫ Dbus Version 0.22
Freedesktop ≫ Dbus Version 0.23
Freedesktop ≫ Dbus Version 0.23.1
Freedesktop ≫ Dbus Version 0.23.2
Freedesktop ≫ Dbus Version 0.23.3
Freedesktop ≫ Dbus Version 0.31
Freedesktop ≫ Dbus Version 0.32
Freedesktop ≫ Dbus Version 0.33
Freedesktop ≫ Dbus Version 0.34
Freedesktop ≫ Dbus Version 0.35
Freedesktop ≫ Dbus Version 0.35.1
Freedesktop ≫ Dbus Version 0.35.2
Freedesktop ≫ Dbus Version 0.36
Freedesktop ≫ Dbus Version 0.36.1
Freedesktop ≫ Dbus Version 0.36.2
Freedesktop ≫ Dbus Version 0.50
Freedesktop ≫ Dbus Version 0.60
Freedesktop ≫ Dbus Version 0.61
Freedesktop ≫ Dbus Version 0.62
Freedesktop ≫ Dbus Version 0.90
Freedesktop ≫ Dbus Version 0.91
Freedesktop ≫ Dbus Version 0.92
Freedesktop ≫ Dbus Version 1.0
Freedesktop ≫ Dbus Version 1.0 Update rc1
Freedesktop ≫ Dbus Version 1.0 Update rc2
Freedesktop ≫ Dbus Version 1.0 Update rc3
Freedesktop ≫ Dbus Version 1.1.0
Freedesktop ≫ Dbus Version 1.1.1
Freedesktop ≫ Dbus Version 1.1.2
Freedesktop ≫ Dbus Version 1.1.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.41% 0.324
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00003.html
http://secunia.com/advisories/34642
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=503532
http://forums.fedoraforum.org/showthread.php?t=206797
http://lists.freedesktop.org/archives/dbus/2008-December/010702.html
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
http://secunia.com/advisories/33047
Vendor Advisory
http://secunia.com/advisories/33055
Vendor Advisory
http://secunia.com/advisories/34360
http://www.securityfocus.com/bid/32674
http://www.vupen.com/english/advisories/2008/3355
https://bugs.freedesktop.org/show_bug.cgi?id=18229
https://bugzilla.redhat.com/show_bug.cgi?id=474895
https://exchange.xforce.ibmcloud.com/vulnerabilities/47138
https://www.redhat.com/archives/fedora-package-announce/2008-December/msg00436.html