NVD

Id
570  
Name
CVE-2008-0595  
Description
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-02-29  
Modified Date
2014-05-05  
Seq
2008-0595  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
3800 570 CVE-2008-0595 [dbus] 20080227 [ANNOUNCE] CVE-2008-0595 D-Bus Security Releases - D-Bus 1.0.3 and D-Bus 1.1.20  View
3801 570 CVE-2008-0595 SUSE-SR:2008:006  View
3802 570 CVE-2008-0595 openSUSE-SU-2012:1418  View
3803 570 CVE-2008-0595 oval:org.mitre.oval:def:9353  View
3804 570 CVE-2008-0595 1019512  View
3805 570 CVE-2008-0595 http://wiki.rpath.com/Advisories:rPSA-2008-0099  View
3806 570 CVE-2008-0595 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099  View
3807 570 CVE-2008-0595 DSA-1599  View
3808 570 CVE-2008-0595 http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/  View
3809 570 CVE-2008-0595 MDVSA-2008:054  View
3810 570 CVE-2008-0595 RHSA-2008:0159  View
3811 570 CVE-2008-0595 20080307 rPSA-2008-0099-1 dbus dbus-glib dbus-qt dbus-x11  View
3812 570 CVE-2008-0595 28023  View
3813 570 CVE-2008-0595 USN-653-1  View
3814 570 CVE-2008-0595 ADV-2008-0694  View
3815 570 CVE-2008-0595 https://issues.rpath.com/browse/RPL-2282  View
3816 570 CVE-2008-0595 FEDORA-2008-2043  View
3817 570 CVE-2008-0595 FEDORA-2008-2070  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45838 JVNDB-2008-001148 D-Bus の dbus-daemon の特定のメソッド呼び出しにおけるアクセス制限回避の脆弱性 D-Bus の dbus-daemon には、特定のメソッド呼び出しにおいてセキュリティポリシーの適用に不備があり、send_interface 属性を認識してしまうために、アクセス制限を回避可能な脆弱性が存在します。 CVE-2008-0595 30708 CVE-2008-0595 570 7.2 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001148.html 2008-02-27 2008-04-15 View