Lucene search

CanonicalCVE-2013-1061

HistoryOct 03, 2013 - 9:55 p.m.

CVE-2013-1061

2013-10-0321:55:03

CWE-264

canonical

web.nvd.nist.gov

cve-2013-1061

d-bus

software properties

polkitunixprocess

polkitsubject

race condition

access restrictions

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

Affected configurations

Nvd

Node

marc_deslaurierssoftware-propertiesMatch0.82.7

marc_deslaurierssoftware-propertiesMatch0.82.7.1

marc_deslaurierssoftware-propertiesMatch0.82.7.2

marc_deslaurierssoftware-propertiesMatch0.82.7.3

marc_deslaurierssoftware-propertiesMatch0.82.7.4

marc_deslaurierssoftware-propertiesMatch0.92.9

marc_deslaurierssoftware-propertiesMatch0.92.9.1

marc_deslaurierssoftware-propertiesMatch0.92.9.2

marc_deslaurierssoftware-propertiesMatch0.92.17

marc_deslaurierssoftware-propertiesMatch0.92.17.1

marc_deslaurierssoftware-propertiesMatch0.92.17.2

Node

canonicalubuntu_linuxMatch12.04-lts

canonicalubuntu_linuxMatch12.10

canonicalubuntu_linuxMatch13.04

VendorProductVersionCPE
marc_deslaurierssoftware-properties0.82.7cpe:2.3:a:marc_deslauriers:software-properties:0.82.7:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.82.7.1cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.1:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.82.7.2cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.2:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.82.7.3cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.3:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.82.7.4cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.4:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.92.9cpe:2.3:a:marc_deslauriers:software-properties:0.92.9:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.92.9.1cpe:2.3:a:marc_deslauriers:software-properties:0.92.9.1:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.92.9.2cpe:2.3:a:marc_deslauriers:software-properties:0.92.9.2:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.92.17cpe:2.3:a:marc_deslauriers:software-properties:0.92.17:*:*:*:*:*:*:*
marc_deslaurierssoftware-properties0.92.17.1cpe:2.3:a:marc_deslauriers:software-properties:0.92.17.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
marc_deslauriers	software-properties	0.82.7	cpe:2.3:a:marc_deslauriers:software-properties:0.82.7:::::::*
marc_deslauriers	software-properties	0.82.7.1	cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.1:::::::*
marc_deslauriers	software-properties	0.82.7.2	cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.2:::::::*
marc_deslauriers	software-properties	0.82.7.3	cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.3:::::::*
marc_deslauriers	software-properties	0.82.7.4	cpe:2.3:a:marc_deslauriers:software-properties:0.82.7.4:::::::*
marc_deslauriers	software-properties	0.92.9	cpe:2.3:a:marc_deslauriers:software-properties:0.92.9:::::::*
marc_deslauriers	software-properties	0.92.9.1	cpe:2.3:a:marc_deslauriers:software-properties:0.92.9.1:::::::*
marc_deslauriers	software-properties	0.92.9.2	cpe:2.3:a:marc_deslauriers:software-properties:0.92.9.2:::::::*
marc_deslauriers	software-properties	0.92.17	cpe:2.3:a:marc_deslauriers:software-properties:0.92.17:::::::*
marc_deslauriers	software-properties	0.92.17.1	cpe:2.3:a:marc_deslauriers:software-properties:0.92.17.1:::::::*