Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4945
HistoryOct 01, 2012 - 12:00 a.m.

CVE-2011-4945

2012-10-0100:00:00
ubuntu.com
ubuntu.com
10

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%

PolicyKit 0.103 sets the AdminIdentities to “wheel” by default, which
allows local users in the wheel group to gain root privileges without
authentication.

Bugs

Notes

Author Note
tyhicks Change introduced in upstream PolicyKit version 0.103 The Debian package reverts the patch

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.1%