| Description: | Description:
The remote host is missing an update to dbus
announced via advisory USN-653-1.
A security issue affects the following Ubuntu releases:
Ubuntu 6.06 LTS
Ubuntu 7.04
Ubuntu 7.10
Ubuntu 8.04 LTS
This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.
Details follow:
Havoc Pennington discovered that the D-Bus daemon did not correctly
validate certain security policies. If a local user sent a specially
crafted D-Bus request, they could bypass security policies that had a
send_interface defined. (CVE-2008-0595)
It was discovered that the D-Bus library did not correctly validate
certain corrupted signatures. If a local user sent a specially crafted
D-Bus request, they could crash applications linked against the D-Bus
library, leading to a denial of service. (CVE-2008-3834)
Solution:
The problem can be corrected by upgrading your system to the
following package versions:
Ubuntu 6.06 LTS:
libdbus-1-2 0.60-6ubuntu8.3
Ubuntu 7.04:
libdbus-1-3 1.0.2-1ubuntu4.2
Ubuntu 7.10:
libdbus-1-3 1.1.1-3ubuntu4.2
Ubuntu 8.04 LTS:
libdbus-1-3 1.1.20-1ubuntu3.1
After a standard system upgrade you need to reboot your computer to
effect the necessary changes.
http://www.securityspace.com/smysecure/catid.html?in=USN-653-1
Risk factor : Medium
CVSS Score:
4.6
|
