Red Hat Security AdvisoryRHSA-2008:0159
dbus security update
Released 2008-02-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) dbus-1.0.0-6.3.el5_1, dbus-1.0.0-6.3.el5_1.i386, dbus-1.0.0-6.3.el5_1.ia64 +9
- Red Hat Enterprise Linux Desktop (v. 5 client) dbus-1.0.0-6.3.el5_1, dbus-1.0.0-6.3.el5_1.i386, dbus-x11-1.0.0-6.3.el5_1 +1
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) dbus-1.0.0-6.3.el5_1, dbus-devel-1.0.0-6.3.el5_1, dbus-devel-1.0.0-6.3.el5_1.i386
Fixes 1 record
Priority LOW 21
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intend…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00404 · Published 2008-02-29 · Fixed CWE-863
