CVE-2015-3643

usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call checkpolkit for the KVMTest method...

usb-creator local authentication bypass vulnerability

usb-creator is a set of tools for creating USB boot disks. A local authentication bypass vulnerability exists in usb-creator, which allows local attackers to bypass security restrictions and elevate privileges...

[USN-2576-1] usb-creator vulnerability

========================================================================== Ubuntu Security Notice USN-2576-1 April 23, 2015 usb-creator vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

usb-creator privilege escalation

No description provided...

Ubuntu: Security Advisory (USN-2576-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS : usb-creator vulnerability (USN-2576-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2576-1 advisory. Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Tenable has...

Ubuntu usb-creator 0.2.x - Local Privilege Escalation Vulnerability

Exploit for linux platform in category local exploits Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0;...

Ubuntu usb-creator local boost vulnerability

Ubuntu is an operating system based on the linux kernel. Ubuntu usb-creator suffers from a local lift vulnerability. An attacker can exploit the vulnerability to gain root privileges...

Ubuntu 15.04 : usb-creator vulnerability (USN-2576-2)

USN-2576-1 fixed a vulnerability in usb-creator. This update provides the corresponding fix for Ubuntu 15.04. Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Note that Tenable Network Security has...

USN-2576-2: usb-creator vulnerability

USN-2576-1 fixed a vulnerability in usb-creator. This update provides the corresponding fix for Ubuntu 15.04. Original advisory details: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

USN-2576-1: usb-creator vulnerability

Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

USN-2576-1 usb-creator vulnerability

Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges...

usb-creator 0.2.x (Ubuntu 12.0414.0414.10) - Local Privilege Escalation

usb-creator 0.2.x Ubuntu 12.0414.0414.10 - Local Privilege Escalation Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void...

Ubuntu usb-creator 0.2.x Local Privilege Escalation

Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0; chmod"/tmp/test", 04755; ^D $ gcc -shared -fPIC -o...

usb-creator 0.2.x (Ubuntu 12.04/14.04/14.10) - Local Privilege Escalation

Source: http://www.openwall.com/lists/oss-security/2015/04/22/12 Bug report: https://bugs.launchpad.net/ubuntu/vivid/+source/usb-creator/+bug/1447396 Ubuntu Precise 12.04LTS test.c void attributeconstructor init void chown"/tmp/test", 0, 0; chmod"/tmp/test", 04755; ^D $ gcc -shared -fPIC -o...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

Race condition

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1063

usb-creator 0.2.47 before 0.2.47.1, 0.2.40 before 0.2.40ubuntu2, and 0.2.38 before 0.2.38.2 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a 1...

CVE-2013-1063

CVE-2013-1063 affects usb-creator versions before 0.2.47.1 and earlier Ubuntu builds (0.2.40ubuntu2, 0.2.38.2). The flaw arises from improper D-Bus communication with a Polkit authority, enabling local users to bypass access restrictions via a PolkitUnixProcess PolkitSubject race conditioned by a...

[USN-1963-1] usb-creator vulnerability

========================================================================== Ubuntu Security Notice USN-1963-1 September 18, 2013 usb-creator vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivative...