Race condition

2010-12-0818:00:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.

CPENameOperatorVersion
enterprise_virtualization_managerle2.2.3
enterprise_virtualization_managereq2.2
enterprise_virtualization_managereq2.1

Name	Operator	Version
enterprise_virtualization_manager	le	2.2.3
enterprise_virtualization_manager	eq	2.2
enterprise_virtualization_manager	eq	2.1

References

securitytracker.com/id?1024825

www.securityfocus.com/bid/45213

bugzilla.redhat.com/show_bug.cgi?id=620355

rhn.redhat.com/errata/RHSA-2010-0818.html