Lucene search

K
cve[email protected]CVE-2011-1485
HistoryMay 31, 2011 - 8:55 p.m.

CVE-2011-1485

2011-05-3120:55:00
CWE-362
web.nvd.nist.gov
51
cve-2011-1485
policykit
polkit
pkexec
local privilege escalation
race condition
nvd
security vulnerability

6.1 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

33.6%

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

CPENameOperatorVersion
redhat:policykitredhat policykiteq0.96

6.1 Medium

AI Score

Confidence

Low

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

33.6%