dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send_interface attributes in allow directives in the security policy only for fully qualified method calls, which allows local users to bypass intended access restrictions via a method call with a NULL interface.
| Software | From | Fixed in |
|---|---|---|
| mandrakesoft / mandrake_linux | 2007 | 2007.x |
| mandrakesoft / mandrake_linux | 2007.0_x86_64 | 2007.0_x86_64.x |
| mandrakesoft / mandrake_linux | 2007.1 | 2007.1.x |
| mandrakesoft / mandrake_linux | 2008.0 | 2008.0.x |
| redhat / enterprise_linux | 5 | 5.x |
| redhat / enterprise_linux | 5.0 | 5.0.x |
| fedoraproject / fedora | 7 | 7.x |
| freedesktop / dbus | - | 1.0.3 |
| freedesktop / dbus | 1.1.0 | 1.1.20 |