{"id":"CVE-2015-1323","aliases":["DEBIAN-CVE-2015-1323","DLA-261-1","EUVD-2015-1464","GHSA-rwcm-x4g7-25c4","UBUNTU-CVE-2015-1323","USN-2648-1"],"status":"published","title":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04,...","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.004,"percentile":0.34514,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-200"],"published":"2015-06-16T17:00:00Z","modified":"2026-06-17T00:22:11Z","fixes":[{"ecosystem":"Debian:6.0","package":"aptdaemon","fixed_in":["0.31+bzr413-1.1+deb6u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"aptdaemon","fixed_in":["1.1.1-1ubuntu5.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:6.0","package":"aptdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.31+bzr413-1.1+deb6u1"}]}],"versions":["0.31+bzr413-1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"aptdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu5.2"}]}],"versions":["1.1.1-0ubuntu3","1.1.1-1ubuntu1","1.1.1-1ubuntu3","1.1.1-1ubuntu4","1.1.1-1ubuntu5","1.1.1-1ubuntu5.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"aptdaemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.1.1-1ubuntu5.2"}]}],"versions":["1.1.1-0ubuntu3","1.1.1-1ubuntu1","1.1.1-1ubuntu3","1.1.1-1ubuntu4","1.1.1-1ubuntu5","1.1.1-1ubuntu5.1"]}],"products":[{"vendor":"canonical","product":"ubuntu_linux"}],"references":[{"url":"http://www.securityfocus.com/bid/75221","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.ubuntu.com/usn/USN-2648-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Mitigation","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-1323"},{"url":"https://github.com/advisories/GHSA-rwcm-x4g7-25c4"},{"url":"https://ubuntu.com/security/CVE-2015-1323","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-2648-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-1323","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-1323","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","status":"published","published":"2017-07-21T14:00:00Z","modified":"2024-08-06T04:40:18.309Z","updated_at":"2026-11-02T14:35:44.404481Z"}],"euvd":[{"id":"EUVD-2015-1464","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","status":"published","published":"2017-07-21T14:00:00Z","modified":"2024-08-06T04:40:18Z","updated_at":"2026-11-03T02:22:16.145787Z"}],"ghsa":[{"id":"GHSA-rwcm-x4g7-25c4","title":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04,...","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","status":"published","published":"2022-05-17T02:26:12Z","modified":"2023-01-27T05:04:48Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:33.466157Z"}],"nvd":[{"id":"CVE-2015-1323","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","status":"published","published":"2017-07-21T14:29:00.21Z","modified":"2026-06-17T00:22:11.677Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.9,"vector":"AV:L/AC:L/Au:N/C:C/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:17.730372Z"}],"osv":[{"id":"UBUNTU-CVE-2015-1323","description":"The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged in Ubuntu 14.10, before 1.1.1-1ubuntu5.2 as packaged in Ubuntu 14.04 LTS, before 0.43+bzr805-0ubuntu10 as packaged in Ubuntu 12.04 LTS allows local users to obtain sensitive information, or access files with root permissions.","status":"published","published":"2015-06-16T17:00:00Z","modified":"2026-02-04T02:54:29.873382Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:09.721803Z"},{"id":"DLA-261-1","title":"aptdaemon - security update","status":"published","published":"2015-06-30T00:00:00Z","modified":"2026-03-09T01:20:46.997751Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"USN-2648-1","title":"aptdaemon vulnerability","description":"Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate\ndbus method. A local attacker could use this issue to possibly expose\nsensitive information, or perform other file access as the root user.\n","status":"published","published":"2015-06-16T17:06:55Z","modified":"2026-02-10T04:40:54Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}