CVE-2011-1485 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	6.9 UNKNOWN	LOCAL	MEDIUM		AV:L/AC:M/Au:N/C:C/I:C/A:C

Base Score

CVSS 3.x

EPSS Score

Percentile: 91%

Affected Products (NVD)

Vendor	Product	Version
redhat	policykit	0.96

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

policykit-1

bookworm	122-3 fixed
bullseye	0.105-31+deb11u1 fixed
bullseye (security)	0.105-31+deb11u1 fixed
sid	125-2 fixed
trixie	125-2 fixed

Ubuntu Releases

Ubuntu Product

Codename

policykit-1

dapper	dne
hardy	dne
karmic	Fixed 0.94-1ubuntu1.1 released
lucid	Fixed 0.96-2ubuntu0.1 released
maverick	Fixed 0.96-2ubuntu1.1 released

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058752.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059859.html

http://secunia.com/advisories/48817

http://security.gentoo.org/glsa/glsa-201204-06.xml

http://securityreason.com/securityalert/8424

http://www.debian.org/security/2011/dsa-2319

http://www.mandriva.com/security/advisories?name=MDVSA-2011:086

http://www.redhat.com/support/errata/RHSA-2011-0455.html

http://www.ubuntu.com/usn/USN-1117-1

https://bugzilla.redhat.com/show_bug.cgi?id=692922

http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058752.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059859.html

http://secunia.com/advisories/48817

http://security.gentoo.org/glsa/glsa-201204-06.xml

http://securityreason.com/securityalert/8424

http://www.debian.org/security/2011/dsa-2319

http://www.mandriva.com/security/advisories?name=MDVSA-2011:086

http://www.redhat.com/support/errata/RHSA-2011-0455.html

http://www.ubuntu.com/usn/USN-1117-1

https://bugzilla.redhat.com/show_bug.cgi?id=692922