Vulnerability Details CVE-2008-0595
dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.0%
CVSS Severity
CVSS v2 Score 4.6
Products affected by CVE-2008-0595
-
cpe:2.3:a:freedesktop:dbus:0.1
-
cpe:2.3:a:freedesktop:dbus:0.10
-
cpe:2.3:a:freedesktop:dbus:0.11
-
cpe:2.3:a:freedesktop:dbus:0.12
-
cpe:2.3:a:freedesktop:dbus:0.13
-
cpe:2.3:a:freedesktop:dbus:0.2
-
cpe:2.3:a:freedesktop:dbus:0.20
-
cpe:2.3:a:freedesktop:dbus:0.21
-
cpe:2.3:a:freedesktop:dbus:0.22
-
cpe:2.3:a:freedesktop:dbus:0.23
-
cpe:2.3:a:freedesktop:dbus:0.23.1
-
cpe:2.3:a:freedesktop:dbus:0.23.2
-
cpe:2.3:a:freedesktop:dbus:0.23.3
-
cpe:2.3:a:freedesktop:dbus:0.23.4
-
cpe:2.3:a:freedesktop:dbus:0.3
-
cpe:2.3:a:freedesktop:dbus:0.31
-
cpe:2.3:a:freedesktop:dbus:0.32.0
-
cpe:2.3:a:freedesktop:dbus:0.33.0
-
cpe:2.3:a:freedesktop:dbus:0.35.0
-
cpe:2.3:a:freedesktop:dbus:0.35.1
-
cpe:2.3:a:freedesktop:dbus:0.35.2
-
cpe:2.3:a:freedesktop:dbus:0.36.0
-
cpe:2.3:a:freedesktop:dbus:0.36.1
-
cpe:2.3:a:freedesktop:dbus:0.36.2
-
cpe:2.3:a:freedesktop:dbus:0.4
-
cpe:2.3:a:freedesktop:dbus:0.5
-
cpe:2.3:a:freedesktop:dbus:0.50
-
cpe:2.3:a:freedesktop:dbus:0.6
-
cpe:2.3:a:freedesktop:dbus:0.60
-
cpe:2.3:a:freedesktop:dbus:0.61
-
cpe:2.3:a:freedesktop:dbus:0.62
-
cpe:2.3:a:freedesktop:dbus:0.7
-
cpe:2.3:a:freedesktop:dbus:0.8
-
cpe:2.3:a:freedesktop:dbus:0.9
-
cpe:2.3:a:freedesktop:dbus:0.90
-
cpe:2.3:a:freedesktop:dbus:0.91
-
cpe:2.3:a:freedesktop:dbus:0.92
-
cpe:2.3:a:freedesktop:dbus:0.93
-
cpe:2.3:a:freedesktop:dbus:0.94
-
cpe:2.3:a:freedesktop:dbus:0.95
-
cpe:2.3:a:freedesktop:dbus:1.0.0
-
cpe:2.3:a:freedesktop:dbus:1.0.1
-
cpe:2.3:a:freedesktop:dbus:1.0.2
-
cpe:2.3:a:freedesktop:dbus:1.1.0
-
cpe:2.3:a:freedesktop:dbus:1.1.1
-
cpe:2.3:a:freedesktop:dbus:1.1.2
-
cpe:2.3:a:freedesktop:dbus:1.1.3
-
cpe:2.3:a:freedesktop:dbus:1.1.4
-
cpe:2.3:o:fedoraproject:fedora:7
-
cpe:2.3:o:mandrakesoft:mandrake_linux:2007
-
cpe:2.3:o:mandrakesoft:mandrake_linux:2007.0_x86_64
-
cpe:2.3:o:mandrakesoft:mandrake_linux:2007.1
-
cpe:2.3:o:mandrakesoft:mandrake_linux:2008.0
-
cpe:2.3:o:redhat:enterprise_linux:5
-
cpe:2.3:o:redhat:enterprise_linux:5.0