CVE

Id
64272  
CVE No.
CVE-2013-4325  
Status
Candidate  
Description
The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634011 64272 CVE-2013-4325 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1002375  View
634012 64272 CVE-2013-4325 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1006674  View
634013 64272 CVE-2013-4325 DEBIAN:DSA-2829  View
634014 64272 CVE-2013-4325 URL:http://www.debian.org/security/2013/dsa-2829  View
634015 64272 CVE-2013-4325 REDHAT:RHSA-2013:1274  View
634016 64272 CVE-2013-4325 URL:http://rhn.redhat.com/errata/RHSA-2013-1274.html  View
634017 64272 CVE-2013-4325 SUSE:openSUSE-SU-2013:1617  View
634018 64272 CVE-2013-4325 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html  View
634019 64272 CVE-2013-4325 SUSE:openSUSE-SU-2013:1620  View
634020 64272 CVE-2013-4325 URL:http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html  View
634021 64272 CVE-2013-4325 UBUNTU:USN-1956-1  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
22957 JVNDB-2013-004532 Apache Camel における任意の Simple 言語式を実行される脆弱性 Apache Camel には、任意のSimple 言語式を実行される脆弱性が存在します。 CVE-2013-4330 64272 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004532.html  View