Beveiligingsadvies

CVE-2008-0595

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2008-02-29 19:00:00

Laatst bijgewerkt 2024-08-07 07:54:22

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

← Alle CVE's bekijken Bekijk op cve.org ↗