CVE-2013-4288
03.10.2013, 21:55
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
| Vendor | Product | Version |
|---|---|---|
| opensuse | opensuse | 12.2 |
| opensuse | opensuse | 12.3 |
| polkit_project | polkit | 𝑥 < 0.112.1 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
| canonical | ubuntu_linux | 13.04 |
| redhat | enterprise_linux | 6.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References