Vulnerability Details CVE-2008-4311
The default configuration of system.conf in D-Bus (aka DBus) before 1.2.6 omits the send_type attribute in certain rules, which allows local users to bypass intended access restrictions by (1) sending messages, related to send_requested_reply; and possibly (2) receiving messages, related to receive_requested_reply.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 13.0%
CVSS Severity
CVSS v2 Score 4.6
Products affected by CVE-2008-4311
-
cpe:2.3:a:freedesktop:dbus:0.1
-
cpe:2.3:a:freedesktop:dbus:0.10
-
cpe:2.3:a:freedesktop:dbus:0.11
-
cpe:2.3:a:freedesktop:dbus:0.12
-
cpe:2.3:a:freedesktop:dbus:0.13
-
cpe:2.3:a:freedesktop:dbus:0.2
-
cpe:2.3:a:freedesktop:dbus:0.20
-
cpe:2.3:a:freedesktop:dbus:0.21
-
cpe:2.3:a:freedesktop:dbus:0.22
-
cpe:2.3:a:freedesktop:dbus:0.23
-
cpe:2.3:a:freedesktop:dbus:0.23.1
-
cpe:2.3:a:freedesktop:dbus:0.23.2
-
cpe:2.3:a:freedesktop:dbus:0.23.3
-
cpe:2.3:a:freedesktop:dbus:0.23.4
-
cpe:2.3:a:freedesktop:dbus:0.3
-
cpe:2.3:a:freedesktop:dbus:0.31
-
cpe:2.3:a:freedesktop:dbus:0.32
-
cpe:2.3:a:freedesktop:dbus:0.32.0
-
cpe:2.3:a:freedesktop:dbus:0.33
-
cpe:2.3:a:freedesktop:dbus:0.33.0
-
cpe:2.3:a:freedesktop:dbus:0.34
-
cpe:2.3:a:freedesktop:dbus:0.35
-
cpe:2.3:a:freedesktop:dbus:0.35.0
-
cpe:2.3:a:freedesktop:dbus:0.35.1
-
cpe:2.3:a:freedesktop:dbus:0.35.2
-
cpe:2.3:a:freedesktop:dbus:0.36
-
cpe:2.3:a:freedesktop:dbus:0.36.0
-
cpe:2.3:a:freedesktop:dbus:0.36.1
-
cpe:2.3:a:freedesktop:dbus:0.36.2
-
cpe:2.3:a:freedesktop:dbus:0.4
-
cpe:2.3:a:freedesktop:dbus:0.5
-
cpe:2.3:a:freedesktop:dbus:0.50
-
cpe:2.3:a:freedesktop:dbus:0.6
-
cpe:2.3:a:freedesktop:dbus:0.60
-
cpe:2.3:a:freedesktop:dbus:0.61
-
cpe:2.3:a:freedesktop:dbus:0.62
-
cpe:2.3:a:freedesktop:dbus:0.7
-
cpe:2.3:a:freedesktop:dbus:0.8
-
cpe:2.3:a:freedesktop:dbus:0.9
-
cpe:2.3:a:freedesktop:dbus:0.90
-
cpe:2.3:a:freedesktop:dbus:0.91
-
cpe:2.3:a:freedesktop:dbus:0.92
-
cpe:2.3:a:freedesktop:dbus:0.93
-
cpe:2.3:a:freedesktop:dbus:0.94
-
cpe:2.3:a:freedesktop:dbus:0.95
-
cpe:2.3:a:freedesktop:dbus:1.0
-
cpe:2.3:a:freedesktop:dbus:1.0.0
-
cpe:2.3:a:freedesktop:dbus:1.0.1
-
cpe:2.3:a:freedesktop:dbus:1.0.2
-
cpe:2.3:a:freedesktop:dbus:1.0.3
-
cpe:2.3:a:freedesktop:dbus:1.1.0
-
cpe:2.3:a:freedesktop:dbus:1.1.1
-
cpe:2.3:a:freedesktop:dbus:1.1.2
-
cpe:2.3:a:freedesktop:dbus:1.1.20
-
cpe:2.3:a:freedesktop:dbus:1.1.3
-
cpe:2.3:a:freedesktop:dbus:1.1.4
-
cpe:2.3:a:freedesktop:dbus:1.2.1
-
cpe:2.3:a:freedesktop:dbus:1.2.2
-
cpe:2.3:a:freedesktop:dbus:1.2.3
-
cpe:2.3:a:freedesktop:dbus:1.2.4