PT-2013-2852
CVE-2013-1064
·
تاريخ النشر
2013-10-03
·
تاريخ التحديث
2019-07-18
الوصف من
CVSS 2.0
4.6
متوسطةالمقاييسAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
apt-xapian-index versions prior to 0.45ubuntu2.1
apt-xapian-index version 0.44ubuntu7.1
apt-xapian-index version 0.44ubuntu5.1
Description
The issue allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process. This occurs because apt-xapian-index does not properly use D-Bus for communication with a polkit authority.
Recommendations
For apt-xapian-index versions prior to 0.45ubuntu2.1, update to version 0.45ubuntu2.1 or later.
For apt-xapian-index version 0.44ubuntu7.1, update to version 0.45ubuntu2.1 or later.
For apt-xapian-index version 0.44ubuntu5.1, update to version 0.45ubuntu2.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾