CVE-2011-2533 The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
LowCVSS 3.3
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dbus(Debian:12) | < 1.3.2~git20100715.821f99c-1 | 1.3.2~git20100715.821f99c-1 |
| debian/dbus(Debian:13) | < 1.3.2~git20100715.821f99c-1 | 1.3.2~git20100715.821f99c-1 |
| debian/dbus(Debian:14) | < 1.3.2~git20100715.821f99c-1 | 1.3.2~git20100715.821f99c-1 |
| freedesktop dbus | = 1.2.1 | No fix listed |
| freedesktop dbus | = 1.2.3 | No fix listed |
| freedesktop dbus | = 1.2.4 | No fix listed |
| freedesktop dbus | = 1.2.6 | No fix listed |
| freedesktop dbus | = 1.2.8 | No fix listed |
| freedesktop dbus | = 1.2.10 | No fix listed |
| freedesktop dbus | = 1.2.12 | No fix listed |
| freedesktop dbus | = 1.2.14 | No fix listed |
| freedesktop dbus | = 1.2.16 | No fix listed |
| freedesktop dbus | = 1.2.18 | No fix listed |
| freedesktop dbus | = 1.2.20 | No fix listed |
| freedesktop dbus | = 1.2.22 | No fix listed |
| freedesktop dbus | = 1.2.24 | No fix listed |
| freedesktop dbus | = 1.2.26 | No fix listed |
References
- Debian Security Tracker CVE-2011-2533 vendor-advisory
- cgit.freedesktop.org
- 1025720 vdb-entry
- dbus-configure-symlink(68173) vdb-entry