high8.8
CVE-2010-4664
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found.
Impact
In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Consolekit Project | Consolekit | before 0.4.2 |
| Debian | Debian Linux | Versions 8.0, 9.0 |
| Redhat | Enterprise Linux | Version 6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/security/cve/cve-2010-4664
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664
- https://security-tracker.debian.org/tracker/CVE-2010-4664
- https://access.redhat.com/security/cve/cve-2010-4664
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664
- https://security-tracker.debian.org/tracker/CVE-2010-4664