5 matches found
CVE-2011-1485
Race condition in the pkexec utility and polkitd daemon in PolicyKit aka polkit 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID...
Code injection
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
CVE-2010-0750
PolicyKit (libpolkit) vulnerability CVE-2010-0750 affects pkexec in PolicyKit 0.96, where error messages in pkexec disclose the existence of local files via the argument. A local attacker could determine whether arbitrary files exist. The issue is documented across multiple sources (SUSE, Gentoo ...
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...