Security Advisory

CVE-2008-0595

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-02-29 19:00:00

Last updated 2024-08-07 07:54:22

Assigner redhat

State PUBLISHED

Description

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

← Browse all CVEs View on cve.org ↗