Page 2 of 11 results (0.001 seconds)
CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2008-0595 – dbus security policy circumvention
https://notcve.org/view.php?id=CVE-2008-0595
29 Feb 2008 — dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface. dbus-daemon en D-Bus anterior a 1.0.3 y 1.1.x anterior a 1.1.20, reconoce atributos de send_interface en directivas de permiso en la política de seguridad sólo para llamadas a métodos completamente cualificados, esto permite a u... • http://lists.freedesktop.org/archives/dbus/2008-February/009401.html • CWE-863: Incorrect Authorization •