CVE-2013-1064

🗓️ 03 Oct 2013 21:00:00Reported by canonicalType

apt-xapian-index before 0.45ubuntu2.1 does not properly use D-Bus for communication with a polkit authority, allowing local users to bypass access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition

Reporter	Title	Published	Views	Family All 13
Cvelist	CVE-2013-1064	3 Oct 201321:00	–	cvelist
Debian CVE	CVE-2013-1064	3 Oct 201321:00	–	debiancve
EUVD	EUVD-2013-1104	7 Oct 202500:30	–	euvd
NVD	CVE-2013-1064	3 Oct 201321:55	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-1955-1)	24 Sep 201300:00	–	openvas
OpenVAS	Ubuntu Update for apt-xapian-index USN-1955-1	24 Sep 201300:00	–	openvas
OSV	DEBIAN-CVE-2013-1064	3 Oct 201321:55	–	osv
Prion	Race condition	3 Oct 201321:55	–	prion
RedhatCVE	CVE-2013-1064	22 May 202511:21	–	redhatcve
securityvulns	polkit authorization bypass in multiple application	3 Oct 201300:00	–	securityvulns

NVD

Node

canonical apt-xapian-indexRange0.45ubuntu1–0.45ubuntu2.1

canonical apt-xapian-indexMatch0.44ubuntu5.1

canonical apt-xapian-indexMatch0.44ubuntu7.1

Node

canonical ubuntu_linuxMatch12.04lts

canonical ubuntu_linuxMatch12.10

canonical ubuntu_linuxMatch13.04

Source	Link
launchpad	www.launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu7.1
launchpad	www.launchpad.net/ubuntu/+source/apt-xapian-index/0.44ubuntu5.1
launchpad	www.launchpad.net/ubuntu/+source/apt-xapian-index/0.45ubuntu2.1
secunia	www.secunia.com/advisories/54914
ubuntu	www.ubuntu.com/usn/USN-1955-1

29 Apr 2026 01:13Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.6

EPSS0.00061

CWE-264