40 matches found
MiracleLinux 4 : polkit-0.96-2.AXS4.1 (AXSA:2011-166:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-166:01 advisory. PolicyKit is a toolkit for defining and handling authorizations. It is used for allowing unprivileged processes to speak to privileged processes. Security...
OracleVM 3.3 / 3.4 : polkit (OVMSA-2019-0008)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix of CVE-2019-6133, PID reuse via slow fork - Resolves: rhbz1667310 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security Advisory OVMSA-2019-0008...
Oracle: Security Advisory (ELSA-2011-0455)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux PolicyKit Race Condition Privilege Escalation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit4 Msf::Exploit::Local Rank = GreatRanking include Msf::Exploit::EXE include Msf::Post::File include...
Linux PolicyKit - Race Condition Privilege Escalation (Metasploit)
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit4 'Linux PolicyKit Race Condition Privilege Escalation', 'Description' = %q A race condition flaw was found in the PolicyKit pkexec utility and polkitd...
CVE-2011-1485
creationtimestamp| type| source ---|---|--- 2014-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35021 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/pkexec.rb 2025-02-06 03:13:40+00:00| seen|...
Linux PolicyKit Race Condition Privilege Escalation Exploit
A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. Those vulnerable include RHEL6 prior to...
Linux PolicyKit Race Condition Privilege Escalation
This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit4 'Linux PolicyKit Race Condition Privilege Escalation', 'Description' = %q A race condition flaw was found in the PolicyKit pkexec utility and polkitd...
Linux PolicyKit Race Condition Privilege Escalation
A race condition flaw was found in the PolicyKit pkexec utility and polkitd daemon. A local user could use this flaw to appear as a privileged user to pkexec, allowing them to execute arbitrary commands as root by running those commands with pkexec. Those vulnerable include RHEL6 prior to...
pkexec Race Condition Privilege Escalation Exploit
No description provided by source. / Exploit Title: pkexec Race condition CVE-2011-1485 exploit Author: xi4oyu Tested on: rhel 6 CVE : 2011-1485 Linux pkexec exploit by xi4oyu , thx [email protected] Have fun �� U can reach us @ http://www.wooyun.org : / include include include include include include...
PolicyKit polkit-1 <= 0.101- linux local privilege escalation
No description provided by source. / polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly, the problem is that...
openSUSE Security Update : libpolkit0 (openSUSE-SU-2011:0412-1)
A race condition exists in pkexec while trying to determine its caller which could lead to privilege escalation. CVE-2011-1485 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
openSUSE Security Update : libpolkit0 (openSUSE-SU-2011:0413-1)
A race condition exists in pkexec while trying to determine its caller which could lead to privilege escalation. CVE-2011-1485 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
polkit security update
0.96-5 - Actually apply the patch, and modify it to apply to 0.96 - Resolves: 1006262 0.96-4.el64 - Include fix for CVE-2013-4288 - Resolves: 1006262 0.96-3.el64 - Include fixes for CVE-2011-1485 - Resolves: 692942...
Oracle Linux 6 : polkit (ELSA-2011-0455)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0455 advisory. - Include fixes for CVE-2011-1485 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...
Slackware Advisory SSA:2011-109-01 polkit
The remote host is missing an update as announced via advisory SSA:2011-109-01. OpenVAS Vulnerability Test $Id: esoftslkssa201110901.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...
RedHat Update for polkit RHSA-2011:0455-01
Check for the Version of polkit OpenVAS Vulnerability Test RedHat Update for polkit RHSA-2011:0455-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Linux pkexec / polkitd 0.96 Race Condition
!/bin/sh pid; if stat procbuf, &statbuf != 0 gseterror error, POLKITERROR, POLKITERRORFAILED, "stat failed for /proc/%d: %s", process-pid, gstrerror errno; goto out; where the code only rely on stat of the pseudo filesystem src/polkit/polkitsubject.c --------- there's not enough validation to run...
pkexec Race Condition
/ Exploit Title: pkexec Race condition CVE-2011-1485 exploit Author: xi4oyu Tested on: rhel 6 CVE : 2011-1485 Linux pkexec exploit by xi4oyu , thx [email protected] Have fun ¡Á U can reach us @ http://www.wooyun.org : / include include include include include include include include include include...
pkexec - Race Condition Privilege Escalation
pkexec - Race Condition Privilege Escalation / Exploit Title: pkexec Race condition CVE-2011-1485 exploit Author: xi4oyu Tested on: rhel 6 CVE : 2011-1485 Linux pkexec exploit by xi4oyu , thx [email protected] Have fun ¡Á U can reach us @ http://www.wooyun.org : / include include include include inclu...