PT-2008-3210
CVE-2008-1658
·
Published
2008-04-11
·
Updated
2017-08-08
Description by
CVSS 2.0
4.6
MediumMetricsAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
PolicyKit versions 0.7 and earlier
Description
The issue is related to a format string vulnerability in the grant helper of PolicyKit. This vulnerability allows attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. The vulnerability is triggered by format strings in a password.
Recommendations
For versions 0.7 and earlier, consider updating to a version later than 0.7 to resolve the issue. As a temporary workaround, restrict the use of the grant helper to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾