NVD

Id
11246  
Name
CVE-2011-4945  
Description
PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-10-01  
Modified Date
2012-12-18  
Seq
2011-4945  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
62232 11246 CVE-2011-4945 http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9  View
62233 11246 CVE-2011-4945 http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch  View
62234 11246 CVE-2011-4945 GLSA-201204-06  View
62235 11246 CVE-2011-4945 [polkit-devel] 20111206 polkit 0.103  View
62236 11246 CVE-2011-4945 [oss-security] 20120327 CVE Request: PolicyKit change allows users in "wheel" group to become root without a password  View
62237 11246 CVE-2011-4945 [oss-security] 20120327 Re: CVE Request: PolicyKit change allows users in "wheel" group to become root without a password  View
62238 11246 CVE-2011-4945 https://bugs.gentoo.org/show_bug.cgi?id=401513  View
62239 11246 CVE-2011-4945 https://launchpad.net/ubuntu/+source/policykit-1/0.103-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
29008 JVNDB-2012-004715 PolicyKit における認証なしで root 権限を取得される脆弱性 PolicyKit は、AdminIdentities をデフォルトで "wheel" に設定しているため、認証なしで root 権限を取得される脆弱性が存在します。 CVE-2011-4945 52852 CVE-2011-4945 11246 4.4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-004715.html 2012-10-01 2012-10-03 View