Race condition

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1065

backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related...

CVE-2013-4326

RealtimeKit aka rtkit 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to...

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1062

CVE-2013-1062 affects ubuntu-system-service up to versions 0.2.4 before 0.2.4.1, 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1. It does not properly use D-Bus for communication with a Polkit authority, allowing local users to bypass intended access restrictions by exploiting a PolkitUnixProcess ...

CVE-2013-1063

CVE-2013-1063 affects usb-creator versions before 0.2.47.1 and earlier Ubuntu builds (0.2.40ubuntu2, 0.2.38.2). The flaw arises from improper D-Bus communication with a Polkit authority, enabling local users to bypass access restrictions via a PolkitUnixProcess PolkitSubject race conditioned by a...

CVE-2013-1066

The CVE-2013-1066 entry affects language-selector in multiple Ubuntu-derived streams (0.110.x before 0.110.1, 0.90.x before 0.90.1, 0.79.x before 0.79.4). The root cause is improper use of D-Bus for communication with Polkit, enabling a PolkitUnixProcess PolkitSubject race condition that local us...

CVE-2013-1061

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProce...

CVE-2013-1065

CVE-2013-1065 : backend.py in Jockey prior to 0.9.7-0ubuntu7.11 does not properly use D-Bus for polkit communication, enabling local bypass of access restrictions via a PolkitUnixProcess PolkitSubject race (noted as related to CVE-2013-4288). Impact is a local privilege bypass with by-passing pol...

CVE-2013-4326

MiracleLinux 4 advisories reference CVE-2013-4326 in rtkit-0.5-2.AXS4, describing a Polkit-related race condition that allows local bypass of access restrictions via PolkitUnixProcess with setuid or pkexec. The linked Nessus notes (AXSA:2013-629:01) and (AXSA:2013-630:01) indicate affected packag...

CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to CVE-2013-4288...

CVE-2013-4327

CVE-2013-4327 describes a Polkit race condition used when systemd communicates with a polkit authority via D-Bus, enabling local users to bypass access restrictions using a PolkitUnixProcess PolkitSubject race with (1) setuid processes or (2) pkexec. Connected advisories (GLSA-201406-27, related ...

CVE-2013-1064

CVE-2013-1064 concerns apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1, which allegedly bypasses access restrictions by exploiting a PolkitUnixProcess PolkitSubject race via a (1) setuid process or (2) pkexec process. Connected Nessus entries reference CVE-2013-4288 (PolKi...

CVE-2013-1062

ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-4326

RealtimeKit aka rtkit 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to...

CVE-2013-1061

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProce...

CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to CVE-2013-4288...

CVE-2013-1064

apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2...

CVE-2013-1061

CVE-2013-1061 relates to dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5, which fails to properly use D-Bus for communication with a Polkit authority. The issue enables local users to bypass intended access restric...

PT-2013-2849

Name of the Vulnerable Software and Affected Versions Software Properties versions 0.92.17 through 0.92.17.2 Software Properties versions 0.92.9 through 0.92.9.2 Software Properties versions 0.82.7 through 0.82.7.4 Description The issue allows local users to bypass intended access restrictions by...