Race condition

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

CVE-2018-8885

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

CVE-2018-8885

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

CVE-2018-8885: Concurrent Execution using Shared Resource with Improper Synchronization

screenresolution-mechanism in screen-resolution-extra 0.17.2 does not properly use the PolicyKit D-Bus API, which allows local users to bypass intended access restrictions by leveraging a race condition via a setuid or pkexec process that is mishandled in a PolicyKitService.checkpermission call...

Authentication flaw

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2016-5410

CVE-2016-5410 affects firewalld before 0.4.3.3. The vulnerability, described in multiple sources, allows local users to bypass authentication and modify firewall configurations via D‑Bus API methods (addPassthrough, removePassthrough, addEntry, removeEntry, setEntries). This is due to improper ac...

CVE-2016-5410

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

CVE-2016-5410: Improper Authentication

firewalld.py in firewalld before 0.4.3.3 allows local users to bypass authentication and modify firewall configurations via the 1 addPassthrough, 2 removePassthrough, 3 addEntry, 4 removeEntry, or 5 setEntries D-Bus API method...

PT-2017-8720

Name of the Vulnerable Software and Affected Versions firewalld versions prior to 0.4.3.3 Description The issue allows local users to bypass authentication and modify firewall configurations. This can be achieved via specific D-Bus API methods, including addPassthrough, removePassthrough, addEntr...

RedHat Update for polkit-qt RHSA-2014:1359-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : polkit-qt (CESA-2014:1359)

Updated polkit-qt packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Important: Red Hat Security Advisory: polkit-qt security update

Updated polkit-qt packages that fix one security issue are now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

Fedora Update for udisks2 FEDORA-2014-3714

Check for the Version of udisks2 OpenVAS Vulnerability Test Fedora Update for udisks2 FEDORA-2014-3714 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 19 Update: udisks2-2.1.2-2.fc19

udisks provides a daemon, D-Bus API and command line tools for managing disks and storage devices. This package is for the udisks 2.x series...

CentOS Update for udisks CESA-2014:0293 centos6

Check for the Version of udisks OpenVAS Vulnerability Test CentOS Update for udisks CESA-2014:0293 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Udisks及Udisks2长路径名本地栈缓冲区溢出漏洞

BUGTRAQ ID: 66081 CVE ID: CVE-2014-0004 Udisks及Udisks2提供了一个守护程序、D-Bus API及命令行工具，以管理磁盘和存储设备。 udisks及udisks2处理较长的路径名时在实现上存在本地栈缓冲区溢出漏洞，攻击者可利用该漏洞插件特制的目录结构，导致以root权限执行任意代码。 0 freedesktop udisks 厂商补丁： freedesktop ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.freedesktop.org/wiki/Software/udi...

rtkit security update

CentOS Errata and Security Advisory CESA-2013:1282 An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...