Lucene search
RedhatCVELIST:CVE-2013-4325HistorySep 23, 2013 - 10:00 a.m.
CVE-2013-4325
2013-09-2310:00:00
redhat
www.cve.org
7
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
References
lists.opensuse.org/opensuse-updates/2013-10/msg00062.html
lists.opensuse.org/opensuse-updates/2013-11/msg00000.html
rhn.redhat.com/errata/RHSA-2013-1274.html
www.debian.org/security/2013/dsa-2829
www.ubuntu.com/usn/USN-1956-1
bugzilla.redhat.com/show_bug.cgi?id=1002375
bugzilla.redhat.com/show_bug.cgi?id=1006674
Related
fedora
fedora
[SECURITY] Fedora 19 Update: hplip-3.13.9-2.fc19
2013-09-20 16:24:56
[SECURITY] Fedora 19 Update: hplip-3.13.9-2.fc19
2013-09-20 04:01:53
[SECURITY] Fedora 18 Update: hplip-3.13.9-2.fc18
2013-10-18 20:03:43
openvas
openvas
Fedora Update for hplip FEDORA-2013-17127
2013-09-24 00:00:00
Oracle: Security Advisory (ELSA-2013-1274)
2015-10-06 00:00:00
Ubuntu Update for hplip USN-1956-1
2013-09-24 00:00:00
nessus
nessus
Slackware 13.1 / 13.37 / 14.0 / current : hplip (SSA:2013-291-01)
2013-10-20 00:00:00
RHEL 6 : hplip (RHSA-2013:1274)
2013-09-20 00:00:00
Oracle Linux 6 : hplip (ELSA-2013-1274)
2013-09-20 00:00:00
centos
centos
hpijs, hplip, libsane security update
2013-09-20 02:23:59
redhat
redhat
(RHSA-2013:1274) Important: hplip security update
2013-09-19 00:00:00
veracode
veracode
Authorization Bypass
2019-01-15 08:59:38
nvd
nvd
CVE-2013-4325
2013-09-23 10:18:58
debiancve
debiancve
CVE-2013-4325
2013-09-23 10:18:58
ubuntu
ubuntu
HPLIP vulnerability
2013-09-18 00:00:00
cve
cve
CVE-2013-4325
2013-09-23 10:18:58
oraclelinux
oraclelinux
hplip security update
2013-09-19 00:00:00
prion
prion
Race condition
2013-09-23 10:18:00
ubuntucve
ubuntucve
CVE-2013-4325
2013-09-18 00:00:00
slackware
slackware
[slackware-security] hplip
2013-10-19 05:18:15
debian
debian
[SECURITY] [DSA 2829-1] hplip security update
2013-12-28 17:56:43
securityvulns
securityvulns
hplip multiple security vulnerabilities
2014-01-09 00:00:00
PolicyKit protection bypass
2013-10-01 00:00:00
[ MDVSA-2013:243 ] polkit
2013-10-01 00:00:00
mageia
mageia
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00