MacOSXLabs RsyncX 2.1 - Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11211/info It is reported that RsyncX is prone to a local privilege escalation vulnerability. RsyncX is installed setuid root and setgid wheel. It is reported that RsyncX drops root privileges properly but fails to drop...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

DEBIAN-CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

Authentication flaw

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

CVE-2011-4945

CVE-2011-4945 affects PolicyKit 0.103, where AdminIdentities are set to the default of the wheel group. This allows local users in wheel to gain root privileges without authentication. The issue is documented across multiple sources (NVD, OSV, Debian, Gentoo GLSA) and is categorized as a local pr...

CVE-2011-4945: Undefined Security Weakness

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication...

Mac OS X Admin Group User List

Using the supplied credentials, Nessus was able to extract the member list of the 'Admin' and 'Wheel' groups. Members of these groups have administrative access to the remote system. TRUSTED...

GLSA-201204-06 : PolicyKit: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201204-06 PolicyKit: Multiple vulnerabilities Multiple vulnerabilities have been found in PolicyKit: Error messages in the pkexec utility disclose the existence of local files CVE-2010-0750. The pkexec utility initially checks the...

many-versioned-wheel (>=0.1.0, <=0.2.1), pyzotero (1.4.9) potentially affected by CVE-2012-2921 via feedparser (>=5.0.0, <=5.1.0)

feedparser PYPI version =5.0.0, =0.1.0, =0.2.1 - pyzotero 1.4.9 Source cves: CVE-2012-2921 Source advisory: OSV:PYSEC-2012-14...

many-versioned-wheel (>=0.1.0, <=0.2.1), pyzotero (1.4.9) potentially affected by CVE-2012-2921 via feedparser (>=5.0.0, <=5.1.0)

feedparser PYPI version =5.0.0, =0.1.0, =0.2.1 - pyzotero 1.4.9 Source cves: CVE-2012-2921 Source advisory: MEND:CVE-2012-2921...

PT-2012-1124 · Polkit · Policykit

Name of the Vulnerable Software and Affected Versions: PolicyKit versions prior to 0.104 Description: The issue concerns multiple vulnerabilities in the polkit package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be...

many-versioned-wheel (>=0.1.0, <=0.2.0) potentially affected by CVE-2011-1157 via feedparser (5.0.0)

feedparser PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1157 Source advisory: OSV:PYSEC-2011-20...

many-versioned-wheel (>=0.1.0, <=0.2.0) potentially affected by CVE-2011-1156 via feedparser (5.0.0)

feedparser PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1156 Source advisory: OSV:PYSEC-2011-19...

many-versioned-wheel (>=0.1.0, <=0.2.0) potentially affected by CVE-2011-1158 via feedparser (5.0.0)

feedparser PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1158 Source advisory: OSV:PYSEC-2011-21...

many-versioned-wheel (>=0.1.0, <=0.2.0) potentially affected by CVE-2011-1157 via feedparser (5.0.0)

feedparser PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on feedparser and may be impacted: - many-versioned-wheel =0.1.0, =0.2.0 Source cves: CVE-2011-1157 Source advisory: MEND:CVE-2011-1157...