CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to CVE-2013-4288...

CVE-2013-1062

ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1066

language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1064

CVE-2013-1064 concerns apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1, which allegedly bypasses access restrictions by exploiting a PolkitUnixProcess PolkitSubject race via a (1) setuid process or (2) pkexec process. Connected Nessus entries reference CVE-2013-4288 (PolKi...

CVE-2013-1066

The CVE-2013-1066 entry affects language-selector in multiple Ubuntu-derived streams (0.110.x before 0.110.1, 0.90.x before 0.90.1, 0.79.x before 0.79.4). The root cause is improper use of D-Bus for communication with Polkit, enabling a PolkitUnixProcess PolkitSubject race condition that local us...

CVE-2013-1062

CVE-2013-1062 affects ubuntu-system-service up to versions 0.2.4 before 0.2.4.1, 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1. It does not properly use D-Bus for communication with a Polkit authority, allowing local users to bypass intended access restrictions by exploiting a PolkitUnixProcess ...

CVE-2013-4327

CVE-2013-4327 describes a Polkit race condition used when systemd communicates with a polkit authority via D-Bus, enabling local users to bypass access restrictions using a PolkitUnixProcess PolkitSubject race with (1) setuid processes or (2) pkexec. Connected advisories (GLSA-201406-27, related ...

CVE-2013-1065

CVE-2013-1065 : backend.py in Jockey prior to 0.9.7-0ubuntu7.11 does not properly use D-Bus for polkit communication, enabling local bypass of access restrictions via a PolkitUnixProcess PolkitSubject race (noted as related to CVE-2013-4288). Impact is a local privilege bypass with by-passing pol...

CVE-2013-4326

MiracleLinux 4 advisories reference CVE-2013-4326 in rtkit-0.5-2.AXS4, describing a Polkit-related race condition that allows local bypass of access restrictions via PolkitUnixProcess with setuid or pkexec. The linked Nessus notes (AXSA:2013-629:01) and (AXSA:2013-630:01) indicate affected packag...

CVE-2013-1065

backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related...

CVE-2013-4326

RealtimeKit aka rtkit 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to...

CVE-2013-4327

systemd does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to CVE-2013-4288...

CentOS Update for rtkit CESA-2013:1282 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for rtkit FEDORA-2013-17529

Check for the Version of rtkit OpenVAS Vulnerability Test Fedora Update for rtkit FEDORA-2013-17529 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

RedHat Update for rtkit RHSA-2013:1282-01

Check for the Version of rtkit OpenVAS Vulnerability Test RedHat Update for rtkit RHSA-2013:1282-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

CentOS Update for rtkit CESA-2013:1282 centos6

Check for the Version of rtkit OpenVAS Vulnerability Test CentOS Update for rtkit CESA-2013:1282 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

RedHat Update for rtkit RHSA-2013:1282-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: rtkit-0.11-7.fc19

RealtimeKit is a D-Bus system service that changes the scheduling policy of user processes/threads to SCHEDRR i.e. realtime scheduling mode on request. It is intended to be used as a secure mechanism to allow real-time scheduling to be used by normal user processes...

rtkit security update

CentOS Errata and Security Advisory CESA-2013:1282 An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

Fedora Update for systemd FEDORA-2013-17119

Check for the Version of systemd OpenVAS Vulnerability Test Fedora Update for systemd FEDORA-2013-17119 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...