PT-2013-2851
CVE-2013-1063
·
تاريخ النشر
2013-10-03
·
تاريخ التحديث
2013-10-04
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
usb-creator versions 0.2.38 through 0.2.38.1
usb-creator versions 0.2.40 through 0.2.40ubuntu1
usb-creator version 0.2.47
Description
The issue allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a setuid process or pkexec process. This occurs because the software does not properly use D-Bus for communication with a polkit authority.
Recommendations
For usb-creator versions 0.2.38 through 0.2.38.1, update to version 0.2.38.2 or later.
For usb-creator versions 0.2.40 through 0.2.40ubuntu1, update to version 0.2.40ubuntu2 or later.
For usb-creator version 0.2.47, update to version 0.2.47.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾