Fluid Attacks Database

Description

The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 12	dbus	>=0 <1.3.2~git20100715.821f99c-1	1.3.2~git20100715.821f99c-1
debian 14	dbus	>=0 <1.3.2~git20100715.821f99c-1	1.3.2~git20100715.821f99c-1
debian 11	dbus	>=0 <1.3.2~git20100715.821f99c-1	1.3.2~git20100715.821f99c-1
debian 13	dbus	>=0 <1.3.2~git20100715.821f99c-1	1.3.2~git20100715.821f99c-1
rpm rhel6	dbus	-	-
rpm rhel5	dbus	-	-

Aliases

1. CVE-2011-25332. NVD-2011-25333. OSV-DEBIAN-2011-25334. OSV-2011-25335. SECURITY-TRACKER-CVE-2011-2533

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.