CVE-2015-3643

CVE-2015-3643 affects usb-creator on Ubuntu releases prior to specific patched builds. The issue is a missing authentication check (check_polkit) in the KVMTest method, enabling local privilege escalation by a local attacker. Patched versions are 0.2.38.3ubuntu0.1 (12.04), 0.2.56.3ubuntu0.1 (14.0...

usb-creator local authentication bypass vulnerability

usb-creator is a set of tools for creating USB boot disks. A local authentication bypass vulnerability exists in usb-creator, which allows local attackers to bypass security restrictions and elevate privileges...

usb-creator privilege escalation

No description provided...

[USN-2576-1] usb-creator vulnerability

========================================================================== Ubuntu Security Notice USN-2576-1 April 23, 2015 usb-creator vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu usb-creator local boost vulnerability

Ubuntu is an operating system based on the linux kernel. Ubuntu usb-creator suffers from a local lift vulnerability. An attacker can exploit the vulnerability to gain root privileges...

Ubuntu usb-creator 0.2.x - Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0;...

Ubuntu 14.04 LTS : usb-creator vulnerability (USN-2576-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2576-1 advisory. Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Tenable has...

Ubuntu: Security Advisory (USN-2576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 15.04 : usb-creator vulnerability (USN-2576-2)

USN-2576-1 fixed a vulnerability in usb-creator. This update provides the corresponding fix for Ubuntu 15.04. Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Note that Tenable Network Security has...

USN-2576-2: usb-creator vulnerability

USN-2576-1 fixed a vulnerability in usb-creator. This update provides the corresponding fix for Ubuntu 15.04. Original advisory details: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

USN-2576-1: usb-creator vulnerability

Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

USN-2576-1 usb-creator vulnerability

Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) - Local Privilege Escalation

Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0; chmod"/tmp/test", 04755; ^D $ gcc -shared -fPIC -o...

usb-creator 0.2.x (Ubuntu 12.0414.0414.10) - Local Privilege Escalation

usb-creator 0.2.x Ubuntu 12.0414.0414.10 - Local Privilege Escalation Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void...

Ubuntu usb-creator 0.2.x Local Privilege Escalation

Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0; chmod"/tmp/test", 04755; ^D $ gcc -shared -fPIC -o...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

Race condition

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1063

CVE-2013-1063 affects usb-creator versions before 0.2.47.1 and earlier Ubuntu builds (0.2.40ubuntu2, 0.2.38.2). The flaw arises from improper D-Bus communication with a Polkit authority, enabling local users to bypass access restrictions via a PolkitUnixProcess PolkitSubject race conditioned by a...

[USN-1963-1] usb-creator vulnerability

========================================================================== Ubuntu Security Notice USN-1963-1 September 18, 2013 usb-creator vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...