VULNERABILITY INTELLIGENCE

CVE-2008-0595

CVSS score4.6 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2008-02-29
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.

Weakness classification

  • CWE-863: Incorrect Authorization

Primary references