[SECURITY] Fedora 18 Update: gksu-polkit-0.0.3-6.fc18

This is a library and application used to ask the user for passwords to run programs as root...

Fedora 17 : gnome-system-log-3.4.1-3.fc17 (2012-18659)

This update changes gnome-system-log to use a stricter polkit policy when running with elevated privileges. Previously, it would only ask for the user's own password; now it requires anadministrator password. This problem has been reported as CVE-2012-5535 Note that Tenable Network Security has...

Fedora 18 : gnome-system-log-3.6.1-2.fc18 (2012-18579)

This update changes gnome-system-log to use a stricter polkit policy when running with elevated privileges. Previously, it would only ask for the user's own password; now it requires anadministrator password. This problem has been reported as CVE-2012-5535 Note that Tenable Network Security has...

Slackware Advisory SSA:2011-109-01 polkit

The remote host is missing an update as announced via advisory SSA:2011-109-01. OpenVAS Vulnerability Test $Id: esoftslkssa201110901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2011-109-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Scientific Linux Security Update : polkit on SL6.x i386/x86_64

A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. CVE-2011-1485 The system must be rebooted for...

RedHat Update for polkit RHSA-2011:0455-01

Check for the Version of polkit OpenVAS Vulnerability Test RedHat Update for polkit RHSA-2011:0455-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RedHat Update for polkit RHSA-2011:0455-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Gentoo Security Advisory GLSA 201204-06 (polkit)

The remote host is missing updates announced in advisory GLSA 201204-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Fedora 16 : systemd-37-15.fc16 (2012-2557)

This systemd update adds several fixes : - logind created files under /run/user/ in an insecure manner. A local attacker could create a symlink inside arbitrary directories CVE-2012-0871. - permissions of PrivateTmp directories RHBZ790522 - timedated did not run without ntp installed RHBZ790260 -...

Linux pkexec / polkitd 0.96 Race Condition

!/bin/sh pid; if stat procbuf, &statbuf != 0 gseterror error, POLKITERROR, POLKITERRORFAILED, "stat failed for /proc/%d: %s", process-pid, gstrerror errno; goto out; where the code only rely on stat of the pseudo filesystem src/polkit/polkitsubject.c --------- there's not enough validation to run...

linux local privilege escalation on polkit-1 <= 0.101

No description provided by source. / polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly, the problem is that...

PolicyKit polkit-1 < 0.101 - Local Privilege Escalation

/ polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly, the problem is that the UID for the parent process of...

CVE-2011-1485

Race condition in the pkexec utility and polkitd daemon in PolicyKit aka polkit 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID...

Immunity Canvas: CVE_2011_1485

Name| CVE20111485 ---|--- CVE| CVE-2011-1485 Exploit Pack| CANVAS Description| CVE-2011-1485: pkexec stuid race Notes| CVE Name: CVE-2011-1485 VENDOR: PolKit Notes: Tested on Red Hat Enterprise Linux 6 Repeatability: Infinite CVE Url: https://vulners.com/cve/CVE-2011-1485 NOTES:...

CVE-2011-1485

CVE-2011-1485 is a race-condition vulnerability in PolicyKit’s pkexec and polkitd that lets a local user escalate privileges by exploiting the mismatch between real and effective UIDs when a setuid binary (e.g., /usr/bin/chsh) is involved in the parent process of pkexec. The root cause is the pke...

CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

Slackware 13.1 / current : polkit (SSA:2011-109-01)

New polkit packages are available for Slackware 13.1 and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2011-109-01. The text itself is copyright C...

Mandriva Update for polkit MDVSA-2011:086 (polkit)

Check for the Version of polkit OpenVAS Vulnerability Test Mandriva Update for polkit MDVSA-2011:086 polkit Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for polkit MDVSA-2011:086 (polkit)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...