Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

D-BUS is a system for sending messages between applications. It is used both for the systemwide message bus service, and as a per-user-login-session messaging facility.

Kimmo Hamalainen discovered a flaw in the way D-BUS processes certain messages. It is possible for a local unprivileged D-BUS process to disrupt the ability of another D-BUS process to receive messages.
(CVE-2006-6107)

Users of dbus are advised to upgrade to these updated packages, which contain backported patches to correct this issue.

The remote NewStart CGSL host, running version MAIN 6.02, has dbus packages installed that are affected by multiple vulnerabilities:

  - Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows     local applications to remove match rules for other applications and cause a denial of service (lost     process messages). (CVE-2006-6107)

  - dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow     directives in the security policy only for fully qualified method calls, which allows local users to     bypass intended access restrictions via a method call with a NULL interface. (CVE-2008-0595)

  - The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before     1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature     via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834. (CVE-2009-1189)

  - libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other     products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS     environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications     that do not cleanse environment variables, not in libdbus itself: we do not support use of libdbus in     setuid binaries that do not sanitize their environment before their first call into libdbus.
    (CVE-2012-3524)

  - The _dbus_printf_string_upper_bound function in dbus/dbus-sysdeps-unix.c in D-Bus (aka DBus) 1.4.x before     1.4.26, 1.6.x before 1.6.12, and 1.7.x before 1.7.4 allows local users to cause a denial of service     (service crash) via a crafted message. (CVE-2013-2168)

  - The dbus-daemon in D-Bus 1.2.x through 1.4.x, 1.6.x before 1.6.20, and 1.8.x before 1.8.4, sends an     AccessDenied error to the service instead of a client when the client is prohibited from accessing the     service, which allows local users to cause a denial of service (initialization failure and exit) or     possibly conduct a side-channel attack via a D-Bus message to an inactive service. (CVE-2014-3477)

  - dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6 allows local users to cause a denial of service     (disconnect) via a certain sequence of crafted messages that cause the dbus-daemon to forward a message     containing an invalid file descriptor. (CVE-2014-3533)

  - Off-by-one error in D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8, when running on a     64-bit system and the max_message_unix_fds limit is set to an odd number, allows local users to cause a     denial of service (dbus-daemon crash) or possibly execute arbitrary code by sending one more file     descriptor than the limit, which triggers a heap-based buffer overflow or an assertion failure.
    (CVE-2014-3635)

  - D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 allows local users to (1) cause a denial of     service (prevention of new connections and connection drop) by queuing the maximum number of file     descriptors or (2) cause a denial of service (disconnect) via multiple messages that combine to have more     than the allowed number of file descriptors for a single sendmsg call. (CVE-2014-3636)

  - D-Bus 1.3.0 through 1.6.x before 1.6.24 and 1.8.x before 1.8.8 does not properly close connections for     processes that have terminated, which allows local users to cause a denial of service via a D-bus message     containing a D-Bus connection file descriptor. (CVE-2014-3637)

  - The bus_connections_check_reply function in config-parser.c in D-Bus before 1.6.24 and 1.8.x before 1.8.8     allows local users to cause a denial of service (CPU consumption) via a large number of method calls.
    (CVE-2014-3638)

  - The dbus-daemon in D-Bus before 1.6.24 and 1.8.x before 1.8.8 does not properly close old connections,     which allows local users to cause a denial of service (incomplete connection consumption and prevention of     new connections) via a large number of incomplete connections. (CVE-2014-3639)

  - D-Bus 1.3.0 through 1.6.x before 1.6.26, 1.8.x before 1.8.10, and 1.9.x before 1.9.2 allows local users to     cause a denial of service (prevention of new connections and connection drop) by queuing the maximum     number of file descriptors. NOTE: this vulnerability exists because of an incomplete fix for     CVE-2014-3636.1. (CVE-2014-7824)

  - D-Bus 1.4.x through 1.6.x before 1.6.30, 1.8.x before 1.8.16, and 1.9.x before 1.9.10 does not validate     the source of ActivationFailure signals, which allows local users to cause a denial of service (activation     failure error returned) by leveraging a race condition involving sending an ActivationFailure signal     before systemd responds. (CVE-2015-0245)

  - An issue was discovered in dbus >= 1.3.0 before 1.12.18. The DBusServer in libdbus, as used in dbus-     daemon, leaks file descriptors when a message exceeds the per-message file descriptor limit. A local     attacker with access to the D-Bus system bus or another system service's private AF_UNIX socket could use     this to make the system service reach its file descriptor limit, denying service to subsequent D-Bus     clients. (CVE-2020-12049)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Red Hat セキュリティアドバイザリ 2007:0008 から：

セキュリティ問題を修正する更新済みの dbus パッケージが Red Hat Enterprise Linux 4 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

D-BUS はアプリケーション間でのメッセージ送信用のシステムです。これは、システム規模のメッセージバスサービスに対して、また per-user-login-session メッセージング機能として使用されます。

Kimmo Hamalainen 氏は、D-BUS が特定のメッセージを処理する方法で欠陥を発見しました。ローカルの権限のない D-BUS プロセスが、他の D-BUS プロセスがメッセージを受信する機能を妨害する可能性があります。
(CVE-2006-6107)

dbus のユーザーは、バックポートされたパッチが含まれるこれらの更新済みパッケージへアップグレードし、この問題を修正することが推奨されます。

openSUSE バージョン 11.4、12.1、12.2 の dbus-1 および dbus-1-x11 のパッケージで、6 つの脆弱性が発見されました。

來自 Red Hat 安全性公告 2007:0008：

現已提供適用於 Red Hat Enterprise Linux 4 的更新版 dbus 套件，可修正一個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

D-BUS 是在應用程式之間傳送訊息的系統。其可用於全系統的訊息匯流排服務，並做為依使用者登入工作階段的傳訊設施使用。

Kimmo Hamalainen 發現 D-BUS 處理特定訊息的方式中有一個瑕疵。無權限的本機 D-BUS 處理程序可中斷其他 D-BUS 處理程序對訊息的接收能力。
(CVE-2006-6107)

建議 dbus 使用者升級至這些更新版套件，其中包含可更正此問題的反向移植修補程式。

在 openSUSE 11.4、12.1 和 12.2 版的 dbus-1 及 dbus-1-x11 套件中發現 6 個弱點。

来自 Red Hat 安全公告 2007:0008：

更新后的 dbus 程序包修复了一个安全问题，现在可用于 Red Hat Enterprise Linux 4。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

D-BUS 是用于在应用程序之间发送消息的系统。它用于整个系统的消息总线服务并用作按用户登录会话消息传递设施。

Kimmo Hamalainen 发现 D-BUS 处理某些消息的方式中存在一个缺陷。本地非特权 D-BUS 进程可以中断另一个 D-BUS 进程接收消息的功能。
(CVE-2006-6107)

建议 dbus 用户升级这些更新后的程序包，其中包含用于修正此问题的向后移植的修补程序。

在 openSUSE 版本 11.4、12.1 和 12.2 的 dbus-1 和 dbus-1-x11 程序包中发现 6 个漏洞。

Secunia reports :

D-Bus have a weakness, which can be exploited by malicious, local users to cause a DoS (Denial of Service).

An error within the 'match_rule_equal()' function can be exploited to disable the ability of other processes to receive messages by removing their matches from D-Bus.

A vulnerability was discovered in D-Bus that could be exploited by a local attacker to cause a Denial of Service.

Updated packages have been patched to correct this issue.

Kimmo Hamalainen discovered that local users could delete other users' D-Bus match rules. Applications would stop receiving D-Bus messages, resulting in a local denial of service, and potential data loss for applications that depended on D-Bus for storing information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

From Red Hat Security Advisory 2007:0008 :

Updated dbus packages that fix a security issue are now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

D-BUS is a system for sending messages between applications. It is used both for the systemwide message bus service, and as a per-user-login-session messaging facility.

Kimmo Hamalainen discovered a flaw in the way D-BUS processes certain messages. It is possible for a local unprivileged D-BUS process to disrupt the ability of another D-BUS process to receive messages.
(CVE-2006-6107)

Users of dbus are advised to upgrade to these updated packages, which contain backported patches to correct this issue.

6 vulnerabilities were discovered for the dbus-1 and dbus-1-x11 packages in openSUSE versions 11.4, 12.1, and 12.2.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
24314	RHEL 4 : dbus (RHSA-2007:0008)	Nessus	Red Hat Local Security Checks	2007/2/9	2021/1/14	low
24285	CentOS 4 : dbus (CESA-2007:0008)	Nessus	CentOS Local Security Checks	2007/2/9	2021/1/4	low
167488	NewStart CGSL MAIN 6.02 : dbus Multiple Vulnerabilities (NS-SA-2022-0093)	Nessus	NewStart CGSL Local Security Checks	2022/11/15	2022/11/16	medium
67436	Oracle Linux 4：dbus（ELSA-2007-0008）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	low
74795	openSUSE セキュリティ更新：dbus-1 / dbus-1-x11（openSUSE-SU-2012：1418-1）	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
67436	Oracle Linux 4 : dbus (ELSA-2007-0008)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	low
74795	openSUSE 安全性更新：dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
67436	Oracle Linux 4：dbus (ELSA-2007-0008)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	low
74795	openSUSE 安全更新：dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium
23871	FreeBSD : dbus -- match_rule_equal() Weakness (5b47b70d-8ba9-11db-81d5-00123ffe8333)	Nessus	FreeBSD Local Security Checks	2006/12/16	2021/1/6	low
24616	Mandrake Linux Security Advisory : dbus (MDKSA-2006:233)	Nessus	Mandriva Local Security Checks	2007/2/18	2021/1/6	low
27989	Ubuntu 5.10 / 6.06 LTS / 6.10 : dbus vulnerability (USN-401-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	low
67436	Oracle Linux 4 : dbus (ELSA-2007-0008)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	low
74795	openSUSE Security Update : dbus-1 / dbus-1-x11 (openSUSE-SU-2012:1418-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium

检测

插件搜索

low

low

medium

low

medium

low

medium

low

medium

low

low

low

low

medium