Every CVE Search/ Get API key

CVE-2005-0201

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is...

2.1 LowFix available

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Exploit likelihood

0.43%Down 0.9 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
CVE-2005-0201
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
CVE-2005-0201
Updated
2026-11-02
EUVDEUVD-2005-0202 No score

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
EUVD-2005-0202
Updated
2026-11-03
GitHub AdvisoriesGHSA-42r7-php7-668w No score

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is...

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
GHSA-42r7-php7-668w
Updated
2026-11-02
OSV No score

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
CVE-2005-0201
Updated
2026-11-02
OSVDEBIAN-CVE-2005-0201 No score

D-BUS (dbus) before 0.22 does not properly restrict access to a socket, if the socket address is known, which allows local users to listen or send arbitrary messages on another user's per-user session bus via that socket.

Record
DEBIAN-CVE-2005-0201
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
dbus
Debian:12
before 0.22
0.22
dbus
Debian:13
before 0.22
0.22
dbus
Debian:14
before 0.22
0.22
dbus
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-debuginfo
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-devel
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-glib
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-python
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-x11
Red Hat:enterprise_linux:4::as
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
Show 17 moreShow less
Affected packages
PackageAffectedFixed
dbus-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-devel
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-glib
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-python
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-x11
Red Hat:enterprise_linux:4::desktop
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-debuginfo
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-devel
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-glib
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-python
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-x11
Red Hat:enterprise_linux:4::es
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-devel
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-glib
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-python
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2
dbus-x11
Red Hat:enterprise_linux:4::ws
before 0:0.22-12.EL.2
0:0.22-12.EL.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-0201 is a low vulnerability (CVSS 2.1) in D-bus, published June 28, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in dbus 0.22.

References

Show 15 moreShow less
MoveEnter Open