Lucene search
+L

479 matches found

OSV
OSV
added 2013/10/03 9:55 p.m.13 views

CVE-2013-4288

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

6.2AI score
SaveExploits0References18
OSV
OSV
added 2013/10/03 9:55 p.m.2 views

DEBIAN-CVE-2013-4288

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

7.2CVSS7.2AI score0.00345EPSS
SaveExploits0References1
OSV
OSV
added 2013/10/03 9:55 p.m.8 views

DEBIAN-CVE-2013-1064

apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1 setuid process or 2...

4.6CVSS6.6AI score0.00378EPSS
SaveExploits0References1
Prion
Prion
added 2013/10/03 9:55 p.m.32 views

Race condition

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

7.2CVSS6.5AI score0.00345EPSS
SaveExploits0References10Affected Software4
Debian CVE
Debian CVE
added 2013/10/03 9:0 p.m.34 views

CVE-2013-4288

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

7.2CVSS6.5AI score0.00345EPSS
SaveExploits0
Cvelist
Cvelist
added 2013/10/03 9:0 p.m.31 views

CVE-2013-4288

Race condition in PolicyKit aka polkit allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to 1 the polkitunixprocessnew API function, 2 the dbus API, or 3 the --process...

6.5AI score0.00345EPSS
SaveExploits0References10
CVE
CVE
added 2013/10/03 9:0 p.m.121 views

CVE-2013-4288

Polkit (PolicyKit) contains a race condition that can allow a local user to bypass authorization by starting a setuid or pkexec process before the polkit authorization check completes. The issue centers on the PolkitUnixProcess race (including polkit_unix_process_new API usage) and is related to ...

7.2CVSS6.4AI score0.00345EPSS
SaveExploits0References10Affected Software1
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.33 views

CentOS Update for rtkit CESA-2013:1282 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS5.2AI score0.00374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.28 views

RedHat Update for rtkit RHSA-2013:1282-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS6.5AI score0.00374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.28 views

RedHat Update for rtkit RHSA-2013:1282-01

Check for the Version of rtkit OpenVAS Vulnerability Test RedHat Update for rtkit RHSA-2013:1282-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

4.6CVSS6.4AI score0.00374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/10/03 12:0 a.m.38 views

CentOS Update for rtkit CESA-2013:1282 centos6

Check for the Version of rtkit OpenVAS Vulnerability Test CentOS Update for rtkit CESA-2013:1282 centos6 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

4.6CVSS6.4AI score0.00374EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2013/10/01 12:0 a.m.61 views

PolicyKit protection bypass

pkcheck race conditions...

7.2CVSS2AI score0.00419EPSS
SaveExploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/09/25 12:0 a.m.40 views

CentOS 6 : rtkit (CESA-2013:1282)

An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

4.6CVSS5.4AI score0.00374EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/25 12:0 a.m.29 views

Oracle Linux 6 : rtkit (ELSA-2013-1282)

The remote Oracle Linux 6 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2013-1282 advisory. 0.5-2 - CVE-2013-4326 Resolves: 1007174 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus...

4.6CVSS5.5AI score0.00374EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2013/09/25 12:0 a.m.35 views

Scientific Linux Security Update : rtkit on SL6.x i386/x86_64 (20130924)

It was found that RealtimeKit communicated with PolicyKit for authorization using a D-Bus API that is vulnerable to a race condition. This could have led to intended PolicyKit authorizations being bypassed. This update modifies RealtimeKit to communicate with PolicyKit via a different API that is...

4.6CVSS5.3AI score0.00374EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2013/09/24 8:31 p.m.75 views

rtkit security update

CentOS Errata and Security Advisory CESA-2013:1282 An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

4.6CVSS5.7AI score0.00374EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2013/09/24 6:2 p.m.55 views

Important: Red Hat Security Advisory: rtkit security update

An updated rtkit package that fixes one security issue is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

4.6CVSS5.7AI score0.00374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/24 12:0 a.m.28 views

RedHat Update for hplip RHSA-2013:1274-01

Check for the Version of hplip OpenVAS Vulnerability Test RedHat Update for hplip RHSA-2013:1274-01 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms...

6.9CVSS8.1AI score0.00419EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/24 12:0 a.m.37 views

CentOS Update for libvirt CESA-2013:1272 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

4.6CVSS6.4AI score0.02678EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2013/09/24 12:0 a.m.29 views

CentOS Update for hpijs CESA-2013:1274 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.8AI score0.00419EPSS
SaveExploits0References2
Rows per page
Query Builder