The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.

local users could disconnect system daemons from the bus by sending specially crafted messages (CVE-2011-2200).

The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-1132 advisory.

    - Merge changes from RHEL-6 branch:
      * Drop default patch fuzz
      * Merge CVE-2010-4352.patch from RHEL-6_0-Z
    - Apply patches for CVE-2011-2200

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility.

A denial of service flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially crafted message to dbus-daemon or to a service using the bus, such as Avahi or NetworkManager, possibly causing the daemon to exit or the service to disconnect from the bus. (CVE-2011-2200)

All users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted.

This update fixes the security issue that local users could disconnect system daemons from the bus by sending specially crafted messages.
(CVE-2011-2200)

The remote host is affected by the vulnerability described in GLSA-201110-14 (D-Bus: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in D-Bus. Please review       the CVE identifiers referenced below for details.
  Impact :

    The vulnerabilities allow for local Denial of Service (daemon crash), or       arbitrary file overwriting.
  Workaround :

    There is no known workaround at this time.

Updated dbus packages that fix one security issue are now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

D-Bus is a system for sending messages between applications. It is used for the system-wide message bus service and as a per-user-login-session messaging facility.

A denial of service flaw was found in the way the D-Bus library handled endianness conversion when receiving messages. A local user could use this flaw to send a specially crafted message to dbus-daemon or to a service using the bus, such as Avahi or NetworkManager, possibly causing the daemon to exit or the service to disconnect from the bus. (CVE-2011-2200)

All users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. For the update to take effect, all running instances of dbus-daemon and all running applications using the libdbus library must be restarted, or the system rebooted.

- Merge fixes from upstream for CVE-2011-2200

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1132 advisory.

  - dbus: Local DoS via messages with non-native byte order (CVE-2011-2200)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It was discovered that DBus did not properly validate the byte order of messages under certain circumstances. An attacker could exploit this to cause a denial of service via application crash or potentially obtain access to sensitive information.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
75812	openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0880-1)	Nessus	SuSE Local Security Checks	medium
75461	openSUSE Security Update : dbus-1 (openSUSE-SU-2011:0880-1)	Nessus	SuSE Local Security Checks	medium
68321	Oracle Linux 5 / 6 : dbus (ELSA-2011-1132)	Nessus	Oracle Linux Local Security Checks	critical
61107	Scientific Linux Security Update : dbus on SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	medium
57178	SuSE 10 Security Update : dbus-1 (ZYPP Patch Number 7592)	Nessus	SuSE Local Security Checks	medium
56589	GLSA-201110-14 : D-Bus: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
56269	CentOS 5 : dbus (CESA-2011:1132)	Nessus	CentOS Local Security Checks	medium
55844	Fedora 14 : dbus-1.4.0-3.fc14 (2011-9817)	Nessus	Fedora Local Security Checks	medium
55809	RHEL 5 / 6 : dbus (RHSA-2011:1132)	Nessus	Red Hat Local Security Checks	critical
55754	Fedora 15 : dbus-1.4.6-5.fc15 (2011-9891)	Nessus	Fedora Local Security Checks	medium
55700	Ubuntu 8.04 LTS / 10.04 LTS / 10.10 / 11.04 : dbus vulnerability (USN-1176-1)	Nessus	Ubuntu Local Security Checks	medium
55588	SuSE 10 Security Update : dbus-1 (ZYPP Patch Number 7593)	Nessus	SuSE Local Security Checks	medium
55587	SuSE 11.1 Security Update : dbus-1 (SAT Patch Number 4799)	Nessus	SuSE Local Security Checks	medium

Detections

Analytics

CVE-2011-2200

critical

Tenable Plugins

medium

medium

critical

medium

medium

medium

medium

medium

critical

medium

medium

medium

medium