Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2008-3834

The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.

Related bugs and status

CVE-2008-3834 (Candidate) is related to these bugs:

Bug #230877: dbus inherits parent filedescriptors

		In	Importance	Status
230877	dbus inherits parent filedescriptors	dbus (Ubuntu)	Undecided	Fix Released
230877	dbus inherits parent filedescriptors	D-Bus	Medium	Fix Released
230877	dbus inherits parent filedescriptors	dbus (Ubuntu Hardy)	Undecided	Fix Released
230877	dbus inherits parent filedescriptors	dbus (Ubuntu Intrepid)	Undecided	Fix Released

Bug #279425: please update dbus to 1.2.4

Summary				In	Importance	Status
	279425	please update dbus to 1.2.4		dbus (Ubuntu)	Undecided	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: http://www.securitytra...
MISC: http://www.securityfoc...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: http://secunia.com/adv...
MISC: https://www.exploit-db...
MISC: http://www.vupen.com/e...
MISC: http://www.debian.org/...
MISC: https://www.redhat.com...
MISC: http://www.mandriva.co...
MISC: http://www.redhat.com/...
MISC: http://lists.opensuse....
MISC: http://www.ubuntu.com/...
MISC: https://exchange.xforc...
MISC: http://kb.juniper.net/...
MISC: http://www.freedesktop...
MISC: https://bugs.freedeskt...
MISC: https://bugzilla.redha...
MISC: http://lists.opensuse....
MISC: https://oval.cisecurit...