Vulnerability Name:

CVE-2006-6107 (CCN-30874)

Assigned:2006-12-12
Published:2006-12-12
Updated:2017-10-11
Summary:Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:1.7 Low (CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P)
1.3 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: MANDRIVA
Type: UNKNOWN
MDKSA-2006:233

Source: MITRE
Type: CNA
CVE-2006-6107

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2012:1418

Source: MLIST
Type: UNKNOWN
[security-announce] 20070209 rPSA-2006-0233-1 dbus dbus-glib dbus-qt dbus-x11

Source: OPENPKG
Type: UNKNOWN
OpenPKG-SA-2006.041

Source: CCN
Type: RHSA-2007-0008
Moderate: dbus security update

Source: CCN
Type: SA23373
D-Bus "match_rule_equal()" Weakness

Source: SECUNIA
Type: UNKNOWN
23373

Source: SECUNIA
Type: UNKNOWN
23390

Source: SECUNIA
Type: UNKNOWN
23611

Source: SECUNIA
Type: UNKNOWN
24059

Source: SECUNIA
Type: UNKNOWN
24131

Source: CCN
Type: SECTRACK ID: 1017608
D-Bus match_rule_equal() Bug Lets Local Users Deny Service

Source: CCN
Type: ASA-2007-058
dbus security update (RHSA-2007-0008)

Source: CCN
Type: Freedesktop.org
D-Bus

Source: CONFIRM
Type: UNKNOWN
http://www.freedesktop.org/wiki/Software/dbus

Source: CCN
Type: OpenPKG-SA-2006.041
D-Bus

Source: REDHAT
Type: UNKNOWN
RHSA-2007:0008

Source: BID
Type: Patch
21571

Source: CCN
Type: BID-21571
D-Bus Signals.C Local Denial of Service Vulnerability

Source: SECTRACK
Type: UNKNOWN
1017608

Source: CCN
Type: USN-401-1
D-Bus vulnerability

Source: UBUNTU
Type: UNKNOWN
USN-401-1

Source: VUPEN
Type: UNKNOWN
ADV-2006-4988

Source: CCN
Type: freedesktop.org Bugzilla Bug 9142
CVE-2006-6107 [patch] fix a nasty bug in match_rule_equal()

Source: CONFIRM
Type: Patch
https://bugs.freedesktop.org/show_bug.cgi?id=9142

Source: XF
Type: UNKNOWN
dbus-matchruleequal-dos(30874)

Source: XF
Type: UNKNOWN
dbus-matchruleequal-dos(30874)

Source: CONFIRM
Type: UNKNOWN
https://issues.rpath.com/browse/RPL-860

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:9951

Vulnerable Configuration:Configuration 1:
  • cpe:/a:d-bus:d-bus:0.13:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:0.20:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:0.21:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:0.22:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:0.23:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:1.0:*:*:*:*:*:*:*
  • OR cpe:/a:d-bus:d-bus:1.0.1:*:*:*:*:*:*:*

    • Configuration RedHat 1:
  • cpe:/o:redhat:enterprise_linux:4:*:*:*:*:*:*:*

    • Configuration RedHat 2:
  • cpe:/o:redhat:enterprise_linux:4::as:*:*:*:*:*

    • Configuration RedHat 3:
  • cpe:/o:redhat:enterprise_linux:4::desktop:*:*:*:*:*

    • Configuration RedHat 4:
  • cpe:/o:redhat:enterprise_linux:4::es:*:*:*:*:*

    • Configuration RedHat 5:
  • cpe:/o:redhat:enterprise_linux:4::ws:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20066107
    V
    		CVE-2006-6107
    2022-06-30
    oval:org.opensuse.security:def:42289
    P
    		Security update for libxml2 (Important)
    2022-05-19
    oval:org.opensuse.security:def:112142
    P
    		dbus-1-1.12.20-5.5 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:32290
    P
    		Security update for apache2 (Important)
    2022-01-12
    oval:org.opensuse.security:def:26223
    P
    		Security update for net-snmp (Important)
    2022-01-05
    oval:org.opensuse.security:def:31371
    P
    		Security update for java-1_8_0-ibm (Important) (in QA)
    2022-01-04
    oval:org.opensuse.security:def:32241
    P
    		Security update for the Linux Kernel (Live Patch 40 for SLE 12 SP3) (Important)
    2021-12-14
    oval:org.opensuse.security:def:31719
    P
    		Security update for glib-networking (Important)
    2021-12-13
    oval:org.opensuse.security:def:105678
    P
    		Security update for MozillaFirefox (Important)
    2021-12-10
    oval:org.opensuse.security:def:31716
    P
    		Security update for mozilla-nss (Important)
    2021-12-06
    oval:org.opensuse.security:def:31314
    P
    		Security update for xen (Moderate)
    2021-12-01
    oval:org.opensuse.security:def:26164
    P
    		Security update for MozillaFirefox (Important)
    2021-11-17
    oval:org.opensuse.security:def:33033
    P
    		Security update for python (Moderate)
    2021-10-26
    oval:org.opensuse.security:def:26150
    P
    		Security update for util-linux (Moderate)
    2021-10-20
    oval:org.opensuse.security:def:26142
    P
    		Security update for apache2 (Important)
    2021-10-06
    oval:org.opensuse.security:def:32185
    P
    		Security update for ghostscript (Critical)
    2021-09-21
    oval:org.opensuse.security:def:32169
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-08-25
    oval:org.opensuse.security:def:31670
    P
    		Security update for python-PyYAML (Important)
    2021-08-24
    oval:org.opensuse.security:def:31661
    P
    		Security update for webkit2gtk3 (Important)
    2021-08-03
    oval:org.opensuse.security:def:31659
    P
    		Security update for qemu (Important)
    2021-07-29
    oval:org.opensuse.security:def:31237
    P
    		Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP3) (Important)
    2021-07-27
    oval:org.opensuse.security:def:32125
    P
    		Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:42090
    P
    		Security update for containerd, docker, runc (Important)
    2021-06-11
    oval:org.opensuse.security:def:36109
    P
    		dbus-1-1.2.10-3.31.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:36389
    P
    		dbus-1-devel-1.2.10-3.31.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:42516
    P
    		dbus-1-1.2.10-3.31.1 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:32103
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-06-04
    oval:org.opensuse.security:def:26062
    P
    		Security update for djvulibre (Important)
    2021-05-31
    oval:org.opensuse.security:def:31614
    P
    		Security update for java-1_7_0-openjdk (Moderate)
    2021-04-29
    oval:org.opensuse.security:def:31163
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:31152
    P
    		Security update for qemu (Important)
    2021-04-16
    oval:org.opensuse.security:def:31605
    P
    		Security update for xorg-x11-server (Important)
    2021-04-14
    oval:org.opensuse.security:def:31151
    P
    		Security update for clamav (Important)
    2021-04-14
    oval:org.opensuse.security:def:32064
    P
    		Security update for the Linux Kernel (Live Patch 36 for SLE 12 SP3) (Important)
    2021-04-07
    oval:org.opensuse.security:def:31369
    P
    		Security update for MozillaFirefox (Important)
    2021-03-31
    oval:org.opensuse.security:def:31361
    P
    		Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP3) (Important)
    2021-03-17
    oval:org.opensuse.security:def:26208
    P
    		Security update for git (Important)
    2021-03-09
    oval:org.opensuse.security:def:31350
    P
    		Security update for python-cryptography (Important)
    2021-03-02
    oval:org.opensuse.security:def:31349
    P
    		Security update for MozillaFirefox (Important)
    2021-03-01
    oval:org.opensuse.security:def:33072
    P
    		Security update for openvswitch (Important)
    2021-02-12
    oval:org.opensuse.security:def:26111
    P
    		Security update for cups (Moderate)
    2021-02-02
    oval:org.opensuse.security:def:31222
    P
    		Security update for MozillaFirefox (Important)
    2021-01-29
    oval:org.opensuse.security:def:26084
    P
    		Security update for postgresql, postgresql12, postgresql13 (Important)
    2021-01-26
    oval:org.opensuse.security:def:32015
    P
    		Security update for openssl (Important)
    2020-12-11
    oval:org.opensuse.security:def:31090
    P
    		Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2020-12-07
    oval:org.opensuse.security:def:35683
    P
    		dbus-1-1.2.10-3.23.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:41943
    P
    		dbus-1-1.2.10-3.11.29 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35882
    P
    		dbus-1-1.2.10-3.27.1 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:35536
    P
    		dbus-1-1.2.10-3.11.29 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:25966
    P
    		Security update for python-setuptools (Important)
    2020-12-02
    oval:org.opensuse.security:def:25099
    P
    		Security update for systemd (Important)
    2020-12-01
    oval:org.opensuse.security:def:25433
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:31567
    P
    		Security update for squid3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:26235
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25819
    P
    		Security update for python-tornado (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32501
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25938
    P
    		Security update for evince (Important)
    2020-12-01
    oval:org.opensuse.security:def:25291
    P
    		Security update for MozillaFirefox (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31458
    P
    		Security update for postgresql91 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32807
    P
    		xen on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25508
    P
    		Security update for mailman (Important)
    2020-12-01
    oval:org.opensuse.security:def:26617
    P
    		nagios on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26501
    P
    		Security update for chromium (Important)
    2020-12-01
    oval:org.opensuse.security:def:25950
    P
    		Security update for evince (Important)
    2020-12-01
    oval:org.opensuse.security:def:25429
    P
    		Security update for libzypp (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31817
    P
    		Security update for atftp (Important)
    2020-12-01
    oval:org.opensuse.security:def:25717
    P
    		Security update for gd (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31959
    P
    		Security update for gtk2 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26670
    P
    		apache2-mod_php5 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31575
    P
    		Security update for sudo
    2020-12-01
    oval:org.opensuse.security:def:25664
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31905
    P
    		Security update for freeradius-server (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26881
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25234
    P
    		Security update for dnsmasq (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25858
    P
    		Security update for util-linux (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27352
    P
    		sblim-sfcb-openssl1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31587
    P
    		Security update for tcpdump (Important)
    2020-12-01
    oval:org.opensuse.security:def:26280
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25913
    P
    		Security update for tcpdump, libpcap (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31971
    P
    		Security update for jakarta-commons-collections (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25246
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31461
    P
    		Security update for postgresql94 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26288
    P
    		Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32351
    P
    		Security update for squid (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25659
    P
    		Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31793
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26515
    P
    		MozillaFirefox on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32648
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31004
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25438
    P
    		Security update for binutils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26376
    P
    		Security update for MozillaThunderbird (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25734
    P
    		Security update for python3 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31942
    P
    		Security update for gnome-session (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26648
    P
    		wget on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31016
    P
    		Security update for java-1_7_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25576
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26434
    P
    		Security update for pdns (Important)
    2020-12-01
    oval:org.opensuse.security:def:25943
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31780
    P
    		Security update for MozillaFirefox, mozilla-nspr, mozilla-nss (Important)
    2020-12-01
    oval:org.opensuse.security:def:25088
    P
    		Security update for libssh (Important)
    2020-12-01
    oval:org.opensuse.security:def:25811
    P
    		Security update for libvirt (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27107
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25432
    P
    		Security update for ibus (Important)
    2020-12-01
    oval:org.opensuse.security:def:31435
    P
    		Security update for php53 (Important)
    2020-12-01
    oval:org.opensuse.security:def:25805
    P
    		Security update for flash-player (Important)
    2020-12-01
    oval:org.opensuse.security:def:32462
    P
    		Security update for xorg-x11-libXfixes (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25163
    P
    		Security update for ghostscript (Important)
    2020-12-01
    oval:org.opensuse.security:def:25444
    P
    		Security update for sysstat (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26568
    P
    		java-1_6_0-ibm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25863
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25939
    P
    		Security update for gstreamer-0_10-plugins-base (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25372
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:32846
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25636
    P
    		Security update for libproxy (Important)
    2020-12-01
    oval:org.opensuse.security:def:31803
    P
    		Security update for amanda (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26656
    P
    		zoo on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26536
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26014
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:25513
    P
    		Security update for java-11-openjdk (Important)
    2020-12-01
    oval:org.opensuse.security:def:31866
    P
    		Security update for curl (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26846
    P
    		xterm on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25774
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:26714
    P
    		gstreamer-0_10-plugins-good on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31576
    P
    		Security update for sudo (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25864
    P
    		Security update for php5 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31927
    P
    		Security update for giflib (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25235
    P
    		Security update for java-1_7_1-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:26009
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:32329
    P
    		Security update for samba (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:27387
    P
    		dbus-1-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25658
    P
    		Security update for liblouis (Low)
    2020-12-01
    oval:org.opensuse.security:def:26364
    P
    		Security update for irssi (Low)
    2020-12-01
    oval:org.opensuse.security:def:25952
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:32609
    P
    		tar on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25310
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31518
    P
    		Security update for quagga (Important)
    2020-12-01
    oval:org.opensuse.security:def:26337
    P
    		Security update for freexl (Low)
    2020-12-01
    oval:org.opensuse.security:def:32395
    P
    		Security update for unrar (Important)
    2020-12-01
    oval:org.opensuse.security:def:25670
    P
    		Security update for ucode-intel (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31885
    P
    		Security update for ecryptfs-utils (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26010
    P
    		Security update for libvirt (Important)
    2020-12-01
    oval:org.opensuse.security:def:31005
    P
    		Security update for java-1_6_0-ibm (Important)
    2020-12-01
    oval:org.opensuse.security:def:25519
    P
    		Security update for python (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:31761
    P
    		Security update for MozillaFirefox (Important)
    2020-12-01
    oval:org.opensuse.security:def:26390
    P
    		Security update for ark (Low)
    2020-12-01
    oval:org.opensuse.security:def:25862
    P
    		Recommended update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:32029
    P
    		Security update for the Linux Kernel (Important)
    2020-12-01
    oval:org.opensuse.security:def:31758
    P
    		Security update for LibVNCServer (Important)
    2020-12-01
    oval:org.opensuse.security:def:26683
    P
    		dbus-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25087
    P
    		Security update for strongswan (Important)
    2020-12-01
    oval:org.opensuse.security:def:25660
    P
    		Security update for sane-backends (Important)
    2020-12-01
    oval:org.opensuse.security:def:27072
    P
    		OpenEXR on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:26000
    P
    		Security update for ImageMagick (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:25766
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:31824
    P
    		Security update for bash (Low)
    2020-12-01
    oval:org.mitre.oval:def:9951
    V
    		Unspecified vulnerability in the match_rule_equal function in bus/signals.c in D-Bus before 1.0.2 allows local applications to remove match rules for other applications and cause a denial of service (lost process messages).
    2013-04-29
    oval:com.redhat.rhsa:def:20070008
    P
    		RHSA-2007:0008: dbus security update (Moderate)
    2007-02-08
    BACK
    d-bus d-bus 0.13
    d-bus d-bus 0.20
    d-bus d-bus 0.21
    d-bus d-bus 0.22
    d-bus d-bus 0.23
    d-bus d-bus 1.0
    d-bus d-bus 1.0.1