NetSight
IP …
high7.2

CVE-2013-4288

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec proces…

Impact

Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.

Affected products

VendorProductAffected versions
OpensuseOpensuse
Versions 12.2, 12.3
Polkit ProjectPolkit
before 0.112.1
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.04
RedhatEnterprise Linux
Version 6.0

Weakness classification

CWE-362

References