488 matches found
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
Code injection
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument...
CVE-2010-0750
PolicyKit (libpolkit) vulnerability CVE-2010-0750 affects pkexec in PolicyKit 0.96, where error messages in pkexec disclose the existence of local files via the argument. A local attacker could determine whether arbitrary files exist. The issue is documented across multiple sources (SUSE, Gentoo ...
Fedora 12 Critics Upset Over Install Rights' Changes
Under Fedora 12, users are able to install software from repositories without being prompted for root password. The undocumented change in Fedora 12 has caused consternation amongst Fedora users. The change is part of PolicyKit’s policy for desktop users and was made to make the system easier for...
Fedora 11 : akonadi-1.2.1-1.fc11 / kde-l10n-4.3.1-2.fc11 / kdeaccessibility-4.3.1-1.fc11 / etc (2009-9397)
This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: KDE 4.3 is now also available in Croatian. A crash when editing toolbar setup has been fixed. Support for transferring files through SSH using KIO::Fish has been fixed. A number of bugs in KWin, KDE's window...
Fedora 10 : akonadi-1.2.1-1.fc10 / kde-l10n-4.3.1-2.fc10 / kdeaccessibility-4.3.1-1.fc10 / etc (2009-9427)
This updates KDE to 4.3.1, the latest upstream bugfix release. The main improvements are: KDE 4.3 is now also available in Croatian. A crash when editing toolbar setup has been fixed. Support for transferring files through SSH using KIO::Fish has been fixed. A number of bugs in KWin, KDE's window...
openSUSE Security Update : PolicyKit (PolicyKit-494)
The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied CVE-2008-4311. The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. %NASLMINLEVEL 70300 ...
openSUSE Security Update : PolicyKit (PolicyKit-494)
The dbus package used a too permissive configuration. Therefore intended access control for some services was not applied CVE-2008-4311. The new configuration denies access by default. Some dbus services may break due to this setting and need an updated configuration as well. %NASLMINLEVEL 70300 ...
openSUSE Security Update : ConsoleKit (ConsoleKit-132)
ConsoleKit allows anyone to shutdown/restart the machine due to missing PolicyKit support. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update ConsoleKit-132. The text description of this plugin i...
Mandriva Linux Security Advisory : policykit (MDVSA-2008:087)
A format string vulnerability in the grant helper, in PolicyKit 0.7 and earlier, allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password. The updated package has been patched to correct this issue. %NASLMINLEVEL 70300 C Tenable...
Mandriva Update for policykit MDVSA-2008:087 (policykit)
Check for the Version of policykit OpenVAS Vulnerability Test Mandriva Update for policykit MDVSA-2008:087 policykit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Mandriva Update for policykit MDVSA-2008:087 (policykit)
Check for the Version of policykit OpenVAS Vulnerability Test Mandriva Update for policykit MDVSA-2008:087 policykit Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
Fedora Update for PolicyKit FEDORA-2008-2987
Check for the Version of PolicyKit OpenVAS Vulnerability Test Fedora Update for PolicyKit FEDORA-2008-2987 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Fedora Update for PolicyKit FEDORA-2008-2987
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
[ MDVSA-2008:087 ] - Updated policykit package fixes format string vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2008:087 http://www.mandriva.com/security/ Package : policykit Date : April 16, 2008 Affected: 2008.1 Problem Description: A format string vulnerability in the grant helper, in PolicyKit 0.7 and earlier, allows...
PolicyKit format string security vulnerability
Format string vulnerability via password...
DEBIAN-CVE-2008-1658
Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...
CVE-2008-1658
Format string vulnerability in the grant helper polkit-grant-helper.c in PolicyKit 0.7 and earlier allows attackers to cause a denial of service crash and possibly execute arbitrary code via format strings in a password...