First published: Wed Jun 22 2011(Updated: )
The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Freedesktop D-Bus | =1.2.1 | |
Freedesktop D-Bus | =1.2.3 | |
Freedesktop D-Bus | =1.2.4 | |
Freedesktop D-Bus | =1.2.6 | |
Freedesktop D-Bus | =1.2.8 | |
Freedesktop D-Bus | =1.2.10 | |
Freedesktop D-Bus | =1.2.12 | |
Freedesktop D-Bus | =1.2.14 | |
Freedesktop D-Bus | =1.2.16 | |
Freedesktop D-Bus | =1.2.18 | |
Freedesktop D-Bus | =1.2.20 | |
Freedesktop D-Bus | =1.2.22 | |
Freedesktop D-Bus | =1.2.24 | |
Freedesktop D-Bus | =1.2.26 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-2533 is considered a medium severity vulnerability due to its potential for local file overwriting.
To fix CVE-2011-2533, upgrade to D-Bus version 1.2.28 or later, where the vulnerability has been addressed.
CVE-2011-2533 enables a symlink attack that allows local users to overwrite arbitrary files.
CVE-2011-2533 affects D-Bus versions from 1.2.1 up to, but not including, 1.2.28.
The impact of CVE-2011-2533 on a system includes potential loss of data integrity due to unauthorized file modifications.