The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3707 advisory.

  - dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass (CVE-2019-12749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Joe Vennix discovered an authentication bypass vulnerability in dbus, an asynchronous inter-process communication system. The implementation of the DBUS_COOKIE_SHA1 authentication mechanism was susceptible to a symbolic link attack. A local attacker could take advantage of this flaw to bypass authentication and connect to a DBusServer with elevated privileges.

For Debian 8 'Jessie', this problem has been fixed in version 1.8.22-0+deb8u2.

We recommend that you upgrade your dbus packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2868 advisory.

    D-Bus is a system for sending messages between applications. It is used both for the system-wide message     bus service, and as a per-user-login-session messaging facility.

    Security Fix(es):

    * dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass (CVE-2019-12749)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - fix netlink poll: error 4 (Zhenzhong Duan)

  - Apply patch for CVE-2019-12749 (#1725574)

  - Fix CVE-2019-12749 (#1725574)

  - Add dbus-run-session (#1268972)

The remote NewStart CGSL host, running version MAIN 4.06, has dbus packages installed that are affected by a vulnerability:

  - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x     before 1.13.12, as used in DBusServer in Canonical     Upstart in Ubuntu 14.04 (and in some, less common, uses     of dbus-daemon), allows cookie spoofing because of     symlink mishandling in the reference implementation of     DBUS_COOKIE_SHA1 in the libdbus library. (This only     affects the DBUS_COOKIE_SHA1 authentication mechanism.)     A malicious client with write access to its own home     directory could manipulate a ~/.dbus-keyrings symlink to     cause a DBusServer with a different uid to read and     write in unintended locations. In the worst case, this     could result in the DBusServer reusing a cookie that is     known to the malicious client, and treating that cookie     as evidence that a subsequent client connection came     from an attacker-chosen uid, allowing authentication     bypass. (CVE-2019-12749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has dbus packages installed that are affected by a vulnerability:

  - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical     Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of     symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only     affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own     home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to     read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a     cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent     client connection came from an attacker-chosen uid, allowing authentication bypass. (CVE-2019-12749)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.06 (SP), has dbus packages installed that are affected by multiple vulnerabilities:

  - dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical     Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of     symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only     affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own     home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to     read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a     cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent     client connection came from an attacker-chosen uid, allowing authentication bypass. (CVE-2019-12749)

  - libdbus 1.5.x and earlier, when used in setuid or other privileged programs in X.org and possibly other     products, allows local users to gain privileges and execute arbitrary code via the DBUS_SYSTEM_BUS_ADDRESS     environment variable. NOTE: libdbus maintainers state that this is a vulnerability in the applications     that do not cleanse environment variables, not in libdbus itself: we do not support use of libdbus in     setuid binaries that do not sanitize their environment before their first call into libdbus.
    (CVE-2012-3524)

  - Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows     local applications to remove match rules for other applications and cause a denial of service (lost     process messages). (CVE-2006-6107)

  - dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow     directives in the security policy only for fully qualified method calls, which allows local users to     bypass intended access restrictions via a method call with a NULL interface. (CVE-2008-0595)

  - The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before     1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature     via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834. (CVE-2009-1189)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of AOS installed on the remote host is prior to 5.19.1. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.19.1 advisory.

  - In Network Security Services (NSS) before 3.46, several cryptographic primitives had missing length     checks. In cases where the application calling the library did not perform a sanity check on the inputs it     could result in a crash due to a buffer overflow. (CVE-2019-17006)

  - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. (CVE-2019-5482)

  - In all versions of cpio before 2.13 does not properly validate input files when generating TAR archives.
    When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may     contain files with permissions the attacker did not have or in paths he did not have access to. Extracting     those archives from a high-privilege user without carefully reviewing them may lead to the compromise of     the system. (CVE-2019-14866)

  - If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to     8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the     HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP     headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This     could lead to users seeing responses for unexpected resources. (CVE-2020-13943)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported     versions that are affected are 5.6.45 and prior, 5.7.27 and prior and 8.0.17 and prior. Easily exploitable     vulnerability allows low privileged attacker with network access via multiple protocols to compromise     MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang     or frequently repeatable crash (complete DOS) of MySQL Server. (CVE-2019-2974)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
145574	CentOS 8 : dbus (CESA-2019:3707)	Nessus	CentOS Local Security Checks	1/29/2021	3/23/2021	high
125926	Debian DLA-1818-1 : dbus security update	Nessus	Debian Local Security Checks	6/17/2019	5/16/2024	high
129273	RHEL 6 : dbus (RHSA-2019:2868)	Nessus	Red Hat Local Security Checks	9/24/2019	11/6/2024	high
126669	OracleVM 3.3 / 3.4 : dbus (OVMSA-2019-0034)	Nessus	OracleVM Local Security Checks	7/15/2019	5/10/2024	high
128693	NewStart CGSL MAIN 4.06 : dbus Vulnerability (NS-SA-2019-0173)	Nessus	NewStart CGSL Local Security Checks	9/11/2019	1/14/2021	high
154467	NewStart CGSL CORE 5.05 / MAIN 5.05 : dbus Vulnerability (NS-SA-2021-0152)	Nessus	NewStart CGSL Local Security Checks	10/27/2021	10/27/2021	high
301215	NewStart CGSL MAIN 6.06 (SP) : dbus Multiple Vulnerabilities (NS-SA-2026-0004)	Nessus	NewStart CGSL Local Security Checks	3/6/2026	3/9/2026	high
164584	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.19.1)	Nessus	Misc.	9/1/2022	7/22/2025	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

critical