dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 prior to 0.92.17.3, 0.92.9 prior to 0.92.9.3, and 0.82.7 prior to 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
marc deslauriers software-properties 0.92.9 |
||
marc deslauriers software-properties 0.82.7.4 |
||
marc deslauriers software-properties 0.92.17.2 |
||
marc deslauriers software-properties 0.82.7.3 |
||
marc deslauriers software-properties 0.82.7.2 |
||
marc deslauriers software-properties 0.92.17.1 |
||
marc deslauriers software-properties 0.92.17 |
||
marc deslauriers software-properties 0.82.7.1 |
||
marc deslauriers software-properties 0.82.7 |
||
marc deslauriers software-properties 0.92.9.2 |
||
marc deslauriers software-properties 0.92.9.1 |
||
canonical ubuntu linux 12.10 |
||
canonical ubuntu linux 13.04 |
||
canonical ubuntu linux 12.04 |
Vulmon