CVE

Id
64273  
CVE No.
CVE-2013-4326  
Status
Candidate  
Description
RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
634022 64273 CVE-2013-4326 MLIST:[oss-security] 20130918 Re: Fwd: [vs-plain] polkit races  View
634023 64273 CVE-2013-4326 URL:http://www.openwall.com/lists/oss-security/2013/09/18/6  View
634024 64273 CVE-2013-4326 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=1006677  View
634025 64273 CVE-2013-4326 REDHAT:RHSA-2013:1282  View
634026 64273 CVE-2013-4326 URL:http://rhn.redhat.com/errata/RHSA-2013-1282.html  View
634027 64273 CVE-2013-4326 SUSE:openSUSE-SU-2013:1548  View
634028 64273 CVE-2013-4326 URL:http://lists.opensuse.org/opensuse-updates/2013-10/msg00022.html  View
634029 64273 CVE-2013-4326 SUSE:openSUSE-SU-2013:1597  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24395 JVNDB-2013-005970 Light Display Manager における重要な情報を取得される脆弱性 Light Display Manager (別名 LightDM) は、一時的な .Xauthority ファイルに対して 0664 パーミッションを使用するため、重要な情報を取得される脆弱性が存在します。 CVE-2013-4331 64273 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005970.html  View