PolicyKit Elevation of Privilege Vulnerability

PolicyKit a.k.a. Polkit is a tool from Red Hat, Inc. for controlling application privileges on Unix-compatible systems. An elevation of privilege vulnerability exists in versions of PolicyKit prior to 0.113. It allows a local user to gain privileges by repeatedly manipulating Id...

CVE-2009-3585

CVE-2009-3585 concerns a session fixation vulnerability in Best Practical Solutions RT 3.0.0–3.6.9 and 3.8.x–3.8.5, in the SetupSessionCookie flow (html/Elements/SetupSessionCookie). The underlying issue allows remote attackers to hijack a user’s web session by manipulating the session identifier...