Lucene search
UbuntuUSN-1953-1HistorySep 18, 2013 - 12:00 a.m.
polkit vulnerability
2013-09-1800:00:00
ubuntu.com
26
6.2 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Releases
- Ubuntu 13.04
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 10.04
Packages
- policykit-1 - framework for managing administrative policies and privileges
Details
It was discovered that polkit didn’t allow applications to use the pkcheck
tool in a way which prevented a race condition in the UID lookup. A local
attacker could use this flaw to possibly escalate privileges.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.04 | noarch | policykit-1 | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | gir1.2-polkit-1.0 | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-agent-1-0 | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-agent-1-dev | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-backend-1-0 | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-backend-1-dev | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-gobject-1-0 | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 13.04 | noarch | libpolkit-gobject-1-dev | < 0.105-1ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | policykit-1 | < 0.104-2ubuntu1.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | gir1.2-polkit-1.0 | < 0.104-2ubuntu1.1 | UNKNOWN |
References
Related
nessus
nessus
openSUSE Security Update : systemd (openSUSE-SU-2013:1527-1)
2014-06-13 00:00:00
CentOS 6 : polkit (CESA-2013:1270)
2013-09-20 00:00:00
openSUSE Security Update : systemd (openSUSE-SU-2013:1528-1)
2014-06-13 00:00:00
openvas
openvas
RedHat Update for polkit RHSA-2013:1270-01
2013-09-24 00:00:00
CentOS Update for polkit CESA-2013:1270 centos6
2013-09-24 00:00:00
Fedora Update for polkit FEDORA-2013-17197
2013-09-24 00:00:00
debiancve
debiancve
centos
centos
polkit security update
2013-09-20 02:25:01
cve
cve
veracode
veracode
Privilege Escalation
2019-01-15 08:59:31
Authorization Bypass
2019-01-15 08:59:41
fedora
fedora
[SECURITY] Fedora 20 Update: polkit-0.112-1.fc20
2013-09-23 00:12:34
[SECURITY] Fedora 19 Update: polkit-0.112-1.fc19
2013-09-20 16:22:44
[SECURITY] Fedora 18 Update: polkit-0.107-6.fc18
2013-09-22 04:28:15
redhat
redhat
(RHSA-2013:1270) Important: polkit security update
2013-09-19 00:00:00
(RHSA-2013:1460) Important: rhev-hypervisor6 security and bug fix update
2013-10-29 00:00:00
prion
prion
ubuntucve
ubuntucve
oraclelinux
oraclelinux
polkit security update
2013-09-19 00:00:00
securityvulns
securityvulns
PolicyKit protection bypass
2013-10-01 00:00:00
[ MDVSA-2013:243 ] polkit
2013-10-01 00:00:00
gentoo
gentoo
polkit, Spice-Gtk, systemd, HPLIP, libvirt: Privilege escalation
2014-06-26 00:00:00
mageia
mageia
6.2 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
5.3%
Related for USN-1953-1