CVE-2013-1065

backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2 pkexec process, a related...

CVE-2013-4325

The checkpermissionv1 function in base/pkit.py in HP Linux Imaging and Printing HPLIP through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race conditio...

PT-2013-1080

Name of the Vulnerable Software and Affected Versions hplip versions prior to 3.14.1 hplip-gui versions 3.12.4 hplip-common versions 3.12.4 hplip-debuginfo versions 3.12.4 hplip-libs versions 3.12.4 libsane-hpaio versions 3.12.4 hpijs versions 3.12.4 Description The issue is related to the check...