CVE-2005-0201: d-bus
Modified
AliasesRHSA-2005:102DEBIAN-CVE-2005-0201
Published 28-06-2005Last modified 07-08-2024
Vulnerability summary
CVE-2005-0201 is a low (CVSS 2.1) vulnerability in d-bus. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36% of scored vulnerabilities.
CVSS score
2.1/10
010
Low · v2.0 (NVD)EPSS score
0.43%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded
Timeline
- 28-06-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.
CVSS metrics
1 score · 1 source · 1 versionLow 2.1Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:P/I:N/A:NSourcesSingle source
EPSS trend
Probability
0.43%
Chance of exploitation in the next 30 days
Percentile
36%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.43% on 22-09-2026
22-09-202622-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Redhat6 products
- dbus< 0:0.22-12.EL.2
- dbus-debuginfo< 0:0.22-12.EL.2
- dbus-devel< 0:0.22-12.EL.2
- dbus-glib< 0:0.22-12.EL.2
- dbus-python< 0:0.22-12.EL.2
D-bus1 product
- d-bus≤ 0.22
Debian1 product
- dbus< 0.22
3 vendors · 8 products
References
20 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10973VDB EntrySignatureX Refsource OVAL
