Description
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
References (3)
Core 3
Core References
Various Sources x_refsource_confirm
http://cgit.freedesktop.org/dbus/dbus/tree/NEWS?h=dbus-1.2
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68173
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1025720
Scores
EPSS
0.0029
EPSS Percentile
20.1%
Details
CWE
CWE-59
Status
published
Products (14)
freedesktop/dbus
1.2.1
freedesktop/dbus
1.2.3
freedesktop/dbus
1.2.4
freedesktop/dbus
1.2.6
freedesktop/dbus
1.2.8
freedesktop/dbus
1.2.10
freedesktop/dbus
1.2.12
freedesktop/dbus
1.2.14
freedesktop/dbus
1.2.16
freedesktop/dbus
1.2.18
... and 4 more
Published
Jun 22, 2011
Tracked Since
Feb 18, 2026