CVE-2008-0595
Title: Freedesktop Dbus Broken Access Control
Broken Access Control
Proof Of Concept
No public PoC currently indexed for CVE-2008-0595.
CWE Category
CWE-863
Published Date
Feb 29, 2008
Modified Date
Apr 09, 2025
Exploit Status
Not Found
Score
4.6
CVSS v2.0
Exploit Probability (EPSS)
0.07%
Vulnerability Summary
CVE-2008-0595: dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.
Impacted Vendors
Reference Links
http://lists.freedesktop.org/archives/dbus/2008-February/009401.html
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html
http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
http://secunia.com/advisories/29148
http://secunia.com/advisories/29160
http://secunia.com/advisories/29171
http://secunia.com/advisories/29173
http://secunia.com/advisories/29281
http://secunia.com/advisories/29323
http://secunia.com/advisories/30869
http://secunia.com/advisories/32281
http://securitytracker.com/id?1019512
http://wiki.rpath.com/Advisories:rPSA-2008-0099
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099
http://www.debian.org/security/2008/dsa-1599
http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/
http://www.mandriva.com/security/advisories?name=MDVSA-2008:054
http://www.redhat.com/support/errata/RHSA-2008-0159.html
http://www.securityfocus.com/archive/1/489280/100/0/threaded
http://www.securityfocus.com/bid/28023
http://www.ubuntu.com/usn/usn-653-1
http://www.vupen.com/english/advisories/2008/0694
https://issues.rpath.com/browse/RPL-2282
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9353
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00893.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00911.html
http://lists.freedesktop.org/archives/dbus/2008-February/009401.html
http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00004.html
http://lists.opensuse.org/opensuse-updates/2012-10/msg00094.html
http://secunia.com/advisories/29148
http://secunia.com/advisories/29160
http://secunia.com/advisories/29171
http://secunia.com/advisories/29173
http://secunia.com/advisories/29281
http://secunia.com/advisories/29323
http://secunia.com/advisories/30869
http://secunia.com/advisories/32281
http://securitytracker.com/id?1019512
http://wiki.rpath.com/Advisories:rPSA-2008-0099
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0099
http://www.debian.org/security/2008/dsa-1599
http://www.j5live.com/2008/02/27/announce-d-bus-1120-conisten-water-released/
http://www.mandriva.com/security/advisories?name=MDVSA-2008:054
http://www.redhat.com/support/errata/RHSA-2008-0159.html
http://www.securityfocus.com/archive/1/489280/100/0/threaded
http://www.securityfocus.com/bid/28023
http://www.ubuntu.com/usn/usn-653-1
http://www.vupen.com/english/advisories/2008/0694
https://issues.rpath.com/browse/RPL-2282
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9353
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00893.html
https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00911.html
CVSS v2.0
Source Entity
[email protected]
Severity
MEDIUM
4.6
Access Vector
N/A
Authentication
N/A
RAW VECTOR
AV:L/AC:L/Au:N/C:P/I:P/A:P
Associated Attack Patterns (CAPEC)
Total: PatternsNo specific attack patterns mapped.
Likelihood
Severity
Page /
CVE-2008-0595 Exploits & PoCs (Proof Of Concept)
No public PoCs found in our database for this CVE.
MODIFIED
Vulnerability data or affected products updated.
PUBLISHED
Vulnerability first announced in NVD.
Attack Vector Matrix
Access Vector
N/A
Complexity
N/A
Privileges
N/A
Interaction
NONE
CVSS Vector String
AV:L/AC:L/Au:N/C:P/I:P/A:P
Affected Stack
No specific products linked.