Package(s):	dbus	CVE #(s):	CVE-2008-3834
Created:	October 10, 2008	Updated:	May 3, 2011
Description:	From the CVE entry: The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.
Alerts:	openSUSE openSUSE-SU-2012:1418-1 dbus 2012-10-31 SUSE SUSE-SR:2011:008 java-1_6_0-ibm, java-1_5_0-ibm, java-1_4_2-ibm, postfix, dhcp6, dhcpcd, mono-addon-bytefx-data-mysql/bytefx-data-mysql, dbus-1, libtiff/libtiff-devel, cifs-mount/libnetapi-devel, rubygem-sqlite3, gnutls, libpolkit0, udisks 2011-05-03 Red Hat RHSA-2010:0018-01 dbus 2010-01-07 CentOS CESA-2010:0018 dbus 2010-01-08 Mandriva MDVSA-2009:256 dbus 2009-10-06 CentOS CESA-2009:0008 dbus 2009-01-08 SuSE SUSE-SR:2008:027 squirrelmail, gnutls, rubygem-activerecord, rubygem-actionpack, samba, dbus-1, pdns, php5, pam_krb5 2008-12-09 Gentoo 200901-04 dbus 2009-01-11 Red Hat RHSA-2009:0008-01 dbus 2009-01-07 Debian DSA-1658-1 dbus 2008-10-22 Mandriva MDVSA-2008:213 dbus 2008-10-15 Ubuntu USN-653-1 dbus 2008-10-14 Fedora FEDORA-2008-8764 dbus 2008-10-09

---

to post comments