D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.
References
Configurations
History
No history.
Information
Published : 2005-06-29 04:00
Updated : 2024-02-28 10:42
NVD link : CVE-2005-0201
Mitre link : CVE-2005-0201
CVE.ORG link : CVE-2005-0201
JSON object : View
Products Affected
d-bus
- d-bus
CWE