Vulnerability Bulletins |
DSA-4462 dbus - security update |
|
| Affected software | Debian |
|
Joe Vennix discovered an authentication bypass vulnerability in dbus, anasynchronous inter-process communication system. The implementation ofthe DBUS_COOKIE_SHA1 authentication mechanism was susceptible to asymbolic link attack. A local attacker could take advantage of this flawto bypass authentication and connect to a DBusServer with elevatedprivileges. More info: https://www.debian.org/security/2019/dsa-4462 |
|