CVE-2008-0595 in Inter-process Communication System

Sumário (Inglês)

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

05/02/2008

Divulgação

29/02/2008

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
41292	D-Bus Inter-process Communication System Access Restriction Elevação de Privilégios	264	Prova de conceito	Correção oficial	CVE-2008-0595

Fontes

• MITRE
• NVD
• CVE Details