CVE-2014-5033: Concurrent Execution using Shared Resource with Improper Synchronization

KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, related to...

PT-2014-1805

Name of the Vulnerable Software and Affected Versions polkit-qt versions 0.103.0 kdelibs versions prior to 4.14 kauth versions prior to 5.1 Description The issue allows local users to bypass intended access restrictions, potentially leading to a violation of confidentiality, integrity, and...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-4326

RealtimeKit aka rtkit 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related issue to...

PT-2013-2854

Name of the Vulnerable Software and Affected Versions language-selector versions 0.79.x through 0.79.3 language-selector versions 0.90.x through 0.90.0 language-selector versions 0.110.x through 0.110.0 Description The issue allows local users to bypass intended access restrictions by leveraging ...

CVE-2013-1062: Undefined Security Weakness

ubuntu-system-service 0.2.4 before 0.2.4.1. 0.2.3 before 0.2.3.1, and 0.2.2 before 0.2.2.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

PT-2013-2851

Name of the Vulnerable Software and Affected Versions usb-creator versions 0.2.38 through 0.2.38.1 usb-creator versions 0.2.40 through 0.2.40ubuntu1 usb-creator version 0.2.47 Description The issue allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess...

CVE-2013-1061: Undefined Security Weakness

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProce...

PT-2013-2852

Name of the Vulnerable Software and Affected Versions apt-xapian-index versions prior to 0.45ubuntu2.1 apt-xapian-index version 0.44ubuntu7.1 apt-xapian-index version 0.44ubuntu5.1 Description The issue allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess...

PT-2013-1263

Name of the Vulnerable Software and Affected Versions systemd affected versions not specified hplip versions prior to 3.14.1 Description The issue involves a race condition in PolkitUnixProcess PolkitSubject, allowing local users to bypass access restrictions. This can be achieved through a setui...

PT-2013-2850

Name of the Vulnerable Software and Affected Versions ubuntu-system-service versions 0.2.2 through 0.2.2.1 ubuntu-system-service versions 0.2.3 through 0.2.3.1 ubuntu-system-service versions 0.2.4 through 0.2.4.1, but not including 0.2.4.1 and later Description The issue allows local users to...

CVE-2013-4325: Undefined Security Weakness

The checkpermissionv1 function in base/pkit.py in HP Linux Imaging and Printing HPLIP through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race conditio...

PT-2013-1262

Name of the Vulnerable Software and Affected Versions hplip versions prior to 3.14.1 libvirt versions 1.0.5.x through 1.0.5.5 libvirt versions 0.10.2.x through 0.10.2.7 libvirt versions 0.9.12.x through 0.9.12.1 Description The issue affects the confidentiality, integrity, and availability of...

PT-2013-1080

Name of the Vulnerable Software and Affected Versions hplip versions prior to 3.14.1 hplip-gui versions 3.12.4 hplip-common versions 3.12.4 hplip-debuginfo versions 3.12.4 hplip-libs versions 3.12.4 libsane-hpaio versions 3.12.4 hpijs versions 3.12.4 Description The issue is related to the check...