Debian/dbus: unknown

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local us

Action: Upgrade dbus to 1.1.20-1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2008-0595#Debian:14/dbus
• https://security-tracker.debian.org/tracker/CVE-2008-0595

published 2008-02-29T19:44:00Z · modified 2026-10-23T17:47:23.207061520Z · JSON