← Back

CVE-2008-4311

nvd nist
Published: Dec 10, 2008Modified: Apr 23, 2026

JSON object

Loading...
4.6
Vector
AV:L/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 3.9 / Impact: 6.4
Source: NVD

Description

The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.

Affected (46)

Products: Freedesktop: Dbus
Freedesktop
1 product
Dbus
Configuration A
46 vulnerable
Vulnerable SoftwareAffected Versions
Freedesktop
Dbus
Up to 1.2.4
Dbus
Version 0.10
Dbus
Version 0.11
Dbus
Version 0.12
Dbus
Version 0.13
Dbus
Version 0.1
Dbus
Version 0.20
Dbus
Version 0.21
Dbus
Version 0.22
Dbus
Version 0.23.1
Dbus
Version 0.23.2
Dbus
Version 0.23.3
Dbus
Version 0.23
Dbus
Version 0.2
Dbus
Version 0.31
Dbus
Version 0.32
Dbus
Version 0.33
Dbus
Version 0.34
Dbus
Version 0.35.1
Dbus
Version 0.35.2
Dbus
Version 0.35
Dbus
Version 0.36.1
Dbus
Version 0.36.2
Dbus
Version 0.36
Dbus
Version 0.3
Dbus
Version 0.4
Dbus
Version 0.50
Dbus
Version 0.5
Dbus
Version 0.60
Dbus
Version 0.61
Dbus
Version 0.62
Dbus
Version 0.6
Dbus
Version 0.7
Dbus
Version 0.8
Dbus
Version 0.90
Dbus
Version 0.91
Dbus
Version 0.92
Dbus
Version 0.9
Dbus
Version 1.0
Dbus
Version 1.0 rc1
Dbus
Version 1.0 rc2
Dbus
Version 1.0 rc3
Dbus
Version 1.1.0
Dbus
Version 1.1.1
Dbus
Version 1.1.2
Dbus
Version 1.1.4

Related CWEs

CWE-16
CWE-16

References (34)

Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.