CVE-2009-1189 The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a si...
LowCVSS 3.6
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | <= 1.2.3 | No fix listed |
| freedesktop dbus | = 0.1 | No fix listed |
| freedesktop dbus | = 0.2 | No fix listed |
| freedesktop dbus | = 0.3 | No fix listed |
| freedesktop dbus | = 0.4 | No fix listed |
| freedesktop dbus | = 0.5 | No fix listed |
| freedesktop dbus | = 0.6 | No fix listed |
| freedesktop dbus | = 0.7 | No fix listed |
| freedesktop dbus | = 0.8 | No fix listed |
| freedesktop dbus | = 0.9 | No fix listed |
| freedesktop dbus | = 0.10 | No fix listed |
| freedesktop dbus | = 0.11 | No fix listed |
| freedesktop dbus | = 0.12 | No fix listed |
| freedesktop dbus | = 0.13 | No fix listed |
| freedesktop dbus | = 0.20 | No fix listed |
| freedesktop dbus | = 0.21 | No fix listed |
| freedesktop dbus | = 0.22 | No fix listed |
| freedesktop dbus | = 0.23 | No fix listed |
| freedesktop dbus | = 0.23.1 | No fix listed |
| freedesktop dbus | = 0.23.2 | No fix listed |
| freedesktop dbus | = 0.23.3 | No fix listed |
| freedesktop dbus | = 0.31 | No fix listed |
| freedesktop dbus | = 0.32 | No fix listed |
| freedesktop dbus | = 0.33 | No fix listed |
| freedesktop dbus | = 0.34 | No fix listed |
Show 27 more
| Product | Affected versions | Fixed in |
|---|---|---|
| freedesktop dbus | = 0.35 | No fix listed |
| freedesktop dbus | = 0.35.1 | No fix listed |
| freedesktop dbus | = 0.35.2 | No fix listed |
| freedesktop dbus | = 0.36 | No fix listed |
| freedesktop dbus | = 0.36.1 | No fix listed |
| freedesktop dbus | = 0.36.2 | No fix listed |
| freedesktop dbus | = 0.50 | No fix listed |
| freedesktop dbus | = 0.60 | No fix listed |
| freedesktop dbus | = 0.61 | No fix listed |
| freedesktop dbus | = 0.62 | No fix listed |
| freedesktop dbus | = 0.90 | No fix listed |
| freedesktop dbus | = 0.91 | No fix listed |
| freedesktop dbus | = 0.92 | No fix listed |
| freedesktop dbus | = 1.0 | No fix listed |
| freedesktop dbus | = 1.0-rc1 | No fix listed |
| freedesktop dbus | = 1.0-rc2 | No fix listed |
| freedesktop dbus | = 1.0-rc3 | No fix listed |
| freedesktop dbus | = 1.0.2 | No fix listed |
| freedesktop dbus | = 1.1.0 | No fix listed |
| freedesktop dbus | = 1.1.1 | No fix listed |
| freedesktop dbus | = 1.1.2 | No fix listed |
| freedesktop dbus | = 1.1.4 | No fix listed |
| freedesktop dbus | = 1.1.20 | No fix listed |
| freedesktop dbus | = 1.2.1 | No fix listed |
| debian/dbus(Debian:12) | < 1.2.14-1 | 1.2.14-1 |
| debian/dbus(Debian:13) | < 1.2.14-1 | 1.2.14-1 |
| debian/dbus(Debian:14) | < 1.2.14-1 | 1.2.14-1 |
References
- bugs.freedesktop.org exploit
- kb.juniper.net
- [security-announce] 20100303 VMSA-2010-0004 ESX Service Console and vMA third party updates mailing-list
- 32127 third-party-advisory vendor-advisory
- 35810 third-party-advisory vendor-advisory
- 38794 third-party-advisory vendor-advisory
- www.freedesktop.org patch vendor-advisory
- [oss-security] 20090416 CVE-2009-1189: invalid fix for CVE-2008-3834 (dbus) mailing-list
- 31602 exploit vdb-entry
- ADV-2010-0528 vdb-entry vendor-advisory
- dbus-dbusmarshalvalidate-spoofing(50385) vdb-entry
- oval:org.mitre.oval:def:10308 signature vdb-entry
- RHSA-2010:0095 vendor-advisory
- USN-799-1 vendor-advisory
- Debian Security Tracker CVE-2009-1189 vendor-advisory
- bugs.debian.org issue-tracking