CVE-2009-1189

Publication date 27 April 2009

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

The _dbus_validate_signature_with_reason function (dbus-marshal-validate.c) in D-Bus (aka DBus) before 1.2.14 uses incorrect logic to validate a basic type, which allows remote attackers to spoof a signature via a crafted key. NOTE: this is due to an incorrect fix for CVE-2008-3834.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
dbus 9.04 jaunty
Fixed 1.2.12-0ubuntu2.1
8.10 intrepid
Fixed 1.2.4-0ubuntu1.1
8.04 LTS hardy
Fixed 1.1.20-1ubuntu3.3
6.06 LTS dapper
Fixed 0.60-6ubuntu8.4

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
dbus

References

Related Ubuntu Security Notices (USN)

Other references