CVE-2011-1485

CVE-2011-1485 is a race-condition vulnerability in PolicyKit’s pkexec and polkitd that lets a local user escalate privileges by exploiting the mismatch between real and effective UIDs when a setuid binary (e.g., /usr/bin/chsh) is involved in the parent process of pkexec. The root cause is the pke...