[SECURITY] [DSA 2319-1] policykit-1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2319-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst October 8, 2011 http://www.debian.org/security/faq -...

DSA-2319-1 policykit-1 - race condition

Bulletin has no description...

PolicyKit polkit-1 0.101 - Local Privilege Escalation

PolicyKit polkit-1 0.101 - Local Privilege Escalation / polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly, t...

PolicyKit polkit-1 < 0.101 - Local Privilege Escalation

/ polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly, the problem is that the UID for the parent process of...

PolicyKit Pwnage: linux local privilege escalation on polkit-1 <= 0.101

Exploit for windows platform in category local exploits / polkit-pwnage.c ============================== = PolicyKit Pwnage = = by zx2c4 = = Sept 2, 2011 = ============================== Howdy folks, This exploits CVE-2011-1485, a race condition in PolicyKit. davidz25 explains: --begin-- Briefly,...

NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...

Moderate: Red Hat Security Advisory: NetworkManager security update

Updated NetworkManager packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

DEBIAN-CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

Design/Logic Flaw

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

CVE-2011-2176

CVE-2011-2176 affects GNOME NetworkManager prior to 0.8.6 where PolicyKit auth_admin is not properly enforced, allowing local users to bypass wireless network sharing restrictions. The MiracleLinux Nessus notes CVE-2011-2176 as a remediation item in NetworkManager 0.8.x, and other advisories cite...

Fedora 14 : NetworkManager-0.8.4-2.git20110622.fc14 (2011-8612)

This update fixes the security issue for creating shared WiFi networks. It's been tracked by 709662 - CVE-2011-2176. Before this update, NetworkManager didn't respect PolicyKit policies for creating shared WiFi networks: actions org.freedesktop.network-manager-settings.system.wifi.share.open and...

RHEL 6 : NetworkManager (RHSA-2011:0930)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0930 advisory. - NetworkManager: Did not honour PolicyKit authadmin action element by creation of Ad-Hoc wireless networks CVE-2011-2176 Note that Nessus has not...

NetworkManager: Did not honour PolicyKit auth_admin action element by creation of Ad-Hoc wireless networks

GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors...

Moderate: Red Hat Security Advisory: NetworkManager security update

Updated NetworkManager packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

Ubuntu 9.10 / 10.04 LTS / 10.10 : policykit-1 vulnerability (USN-1117-1)

Neel Mehta discovered that PolicyKit did not correctly verify the user making authorization requests. A local attacker could exploit this to trick pkexec into running applications with root privileges. Note that Tenable Network Security has extracted the preceding description block directly from...