Vulnerability Description
Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Opensuse | Opensuse | 12.2 |
| Polkit Project | Polkit | < 0.112.1 |
| Canonical | Ubuntu Linux | 10.04 |
| Redhat | Enterprise Linux | 6.0 |
Related Weaknesses (CWE)
References
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375Issue TrackingPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.htmlMailing ListThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1270.htmlThird Party Advisory
- http://rhn.redhat.com/errata/RHSA-2013-1460.htmlThird Party Advisory
- http://seclists.org/oss-sec/2013/q3/626Mailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2013/09/18/4Mailing ListThird Party Advisory
- http://www.ubuntu.com/usn/USN-1953-1Third Party Advisory
- http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375Issue TrackingPatchThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.htmlMailing ListThird Party Advisory
- http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.htmlMailing ListThird Party Advisory
FAQ
What is CVE-2013-4288?
CVE-2013-4288 is a vulnerability with a CVSS score of 7.2 (HIGH). Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is perfo...
How severe is CVE-2013-4288?
CVE-2013-4288 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-4288?
Check the references section above for vendor advisories and patch information. Affected products include: Opensuse Opensuse, Polkit Project Polkit, Canonical Ubuntu Linux, Redhat Enterprise Linux.