DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the (1) DeviceKit-Power, (2) NetworkManager, and (3) ModemManager services.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dbus-glib | Freedesktop | 0.73 (including) | 0.73 (including) |
| Red Hat Enterprise Linux 5 | RedHat | dbus-glib-0:0.73-10.el5_5 | * |
| Red Hat Enterprise Linux 5 | RedHat | NetworkManager-1:0.7.0-10.el5_5.1 | * |
| Dbus-glib | Ubuntu | hardy | * |
| Dbus-glib | Ubuntu | jaunty | * |
| Dbus-glib | Ubuntu | karmic | * |
| Dbus-glib | Ubuntu | lucid | * |
| Dbus-glib | Ubuntu | upstream | * |