Executive Summary

Informations
Name MDVSA-2013:243 First vendor Publication 2013-09-27
Vendor Mandriva Last vendor Modification 2013-09-27
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score 7.2 Attack Range Local
Cvss Impact Score 10 Attack Complexity Low
Cvss Expoit Score 3.9 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Updated polkit packages fix security vulnerability:

A race condition was found in the way the PolicyKit pkcheck utility checked process authorization when the process was specified by its process ID via the --process option. A local user could use this flaw to bypass intended PolicyKit authorizations and escalate their privileges (CVE-2013-4288).

Note: Applications that invoke pkcheck with the --process option need to be modified to use the pid,pid-start-time,uid argument for that option, to allow pkcheck to check process authorization correctly.

Because of the change in the PolicyKit API, hplip (CVE-2013-4325), rtkit (CVE-2013-4326), and systemd (CVE-2013-4327) packages have been updated to use a different API that is not affected by this PolicyKit vulnerability.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2013:243

CWE : Common Weakness Enumeration

% Id Name
75 % CWE-264 Permissions, Privileges, and Access Controls
25 % CWE-362 Race Condition

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:18931
 
Oval ID: oval:org.mitre.oval:def:18931
Title: USN-1961-1 -- systemd vulnerability
Description: systemd could be tricked into bypassing polkit authorizations.
Family: unix Class: patch
Reference(s): USN-1961-1
CVE-2013-4327
Version: 5
Platform(s): Ubuntu 13.04
Product(s): systemd
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:19023
 
Oval ID: oval:org.mitre.oval:def:19023
Title: USN-1953-1 -- policykit-1 vulnerability
Description: polkit could be tricked into giving out improper authorization.
Family: unix Class: patch
Reference(s): USN-1953-1
CVE-2013-4288
Version: 5
Platform(s): Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04
Product(s): policykit-1
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:19317
 
Oval ID: oval:org.mitre.oval:def:19317
Title: USN-1959-1 -- rtkit vulnerability
Description: RealtimeKit could be tricked into bypassing polkit authorizations.
Family: unix Class: patch
Reference(s): USN-1959-1
CVE-2013-4326
Version: 5
Platform(s): Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04
Product(s): rtkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:19347
 
Oval ID: oval:org.mitre.oval:def:19347
Title: USN-1956-1 -- hplip vulnerability
Description: HPLIP could be tricked into bypassing polkit authorizations.
Family: unix Class: patch
Reference(s): USN-1956-1
CVE-2013-4325
Version: 5
Platform(s): Ubuntu 13.04
Ubuntu 12.10
Ubuntu 12.04
Ubuntu 10.04
Product(s): hplip
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:20783
 
Oval ID: oval:org.mitre.oval:def:20783
Title: RHSA-2013:1270: polkit security update (Important)
Description: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Family: unix Class: patch
Reference(s): RHSA-2013:1270-00
CESA-2013:1270
CVE-2013-4288
Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): polkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21125
 
Oval ID: oval:org.mitre.oval:def:21125
Title: RHSA-2013:1282: rtkit security update (Important)
Description: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Family: unix Class: patch
Reference(s): RHSA-2013:1282-00
CESA-2013:1282
CVE-2013-4326
Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): rtkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:21246
 
Oval ID: oval:org.mitre.oval:def:21246
Title: RHSA-2013:1274: hplip security update (Important)
Description: The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Family: unix Class: patch
Reference(s): RHSA-2013:1274-00
CESA-2013:1274
CVE-2013-4325
Version: 4
Platform(s): Red Hat Enterprise Linux 6
CentOS Linux 6
Product(s): hplip
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23490
 
Oval ID: oval:org.mitre.oval:def:23490
Title: ELSA-2013:1282: rtkit security update (Important)
Description: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.
Family: unix Class: patch
Reference(s): ELSA-2013:1282-00
CVE-2013-4326
Version: 6
Platform(s): Oracle Linux 6
Product(s): rtkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23555
 
Oval ID: oval:org.mitre.oval:def:23555
Title: ELSA-2013:1274: hplip security update (Important)
Description: The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
Family: unix Class: patch
Reference(s): ELSA-2013:1274-00
CVE-2013-4325
Version: 6
Platform(s): Oracle Linux 6
Product(s): hplip
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:23974
 
Oval ID: oval:org.mitre.oval:def:23974
Title: ELSA-2013:1270: polkit security update (Important)
Description: Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Family: unix Class: patch
Reference(s): ELSA-2013:1270-00
CVE-2013-4288
Version: 6
Platform(s): Oracle Linux 6
Product(s): polkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:26840
 
Oval ID: oval:org.mitre.oval:def:26840
Title: DEPRECATED: ELSA-2013-1282 -- rtkit security update (important)
Description: [0.5-2] - CVE-2013-4326 Resolves: #1007174
Family: unix Class: patch
Reference(s): ELSA-2013-1282
CVE-2013-4326
Version: 4
Platform(s): Oracle Linux 6
Product(s): rtkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27203
 
Oval ID: oval:org.mitre.oval:def:27203
Title: DEPRECATED: ELSA-2013-1270 -- polkit security update (important)
Description: [0.96-5] - Actually apply the patch, and modify it to apply to 0.96 - Resolves: #1006262 [0.96-4.el6_4] - Include fix for CVE-2013-4288 - Resolves: #1006262 [0.96-3.el6_4] - Include fixes for CVE-2011-1485 - Resolves: #692942
Family: unix Class: patch
Reference(s): ELSA-2013-1270
CVE-2013-4288
Version: 4
Platform(s): Oracle Linux 6
Product(s): polkit
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:27501
 
Oval ID: oval:org.mitre.oval:def:27501
Title: DEPRECATED: ELSA-2013-1274 -- hplip security update (important)
Description: [3.12.4-4:.1] - Applied patch to avoid unix-process authorization subject when using polkit as it is racy (CVE-2013-4325).
Family: unix Class: patch
Reference(s): ELSA-2013-1274
CVE-2013-4325
Version: 4
Platform(s): Oracle Linux 6
Product(s): hplip
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 35
Application 1
Application 1
Application 1
Os 4
Os 1
Os 2
Os 1

Nessus® Vulnerability Scanner

Date Description
2014-11-08 Name : The remote Red Hat host is missing a security update.
File : redhat-RHSA-2013-1460.nasl - Type : ACT_GATHER_INFO
2014-06-27 Name : The remote Gentoo host is missing one or more security-related patches.
File : gentoo_GLSA-201406-27.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-737.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-755.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-738.nasl - Type : ACT_GATHER_INFO
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2013-812.nasl - Type : ACT_GATHER_INFO
2014-02-04 Name : The remote SuSE 11 host is missing one or more security updates.
File : suse_11_hplip-140116.nasl - Type : ACT_GATHER_INFO
2013-12-31 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2829.nasl - Type : ACT_GATHER_INFO
2013-10-20 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17112.nasl - Type : ACT_GATHER_INFO
2013-10-20 Name : The remote Slackware host is missing a security update.
File : Slackware_SSA_2013-291-01.nasl - Type : ACT_GATHER_INFO
2013-10-13 Name : The remote Debian host is missing a security-related update.
File : debian_DSA-2777.nasl - Type : ACT_GATHER_INFO
2013-10-13 Name : The remote Fedora host is missing a security update.
File : fedora_2013-18442.nasl - Type : ACT_GATHER_INFO
2013-10-10 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17171.nasl - Type : ACT_GATHER_INFO
2013-10-10 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17583.nasl - Type : ACT_GATHER_INFO
2013-09-28 Name : The remote Mandriva Linux host is missing one or more security updates.
File : mandriva_MDVSA-2013-243.nasl - Type : ACT_GATHER_INFO
2013-09-27 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17529.nasl - Type : ACT_GATHER_INFO
2013-09-25 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-25 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130924_rtkit_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-25 Name : The remote Oracle Linux host is missing a security update.
File : oraclelinux_ELSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-25 Name : The remote CentOS host is missing a security update.
File : centos_RHSA-2013-1282.nasl - Type : ACT_GATHER_INFO
2013-09-23 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17203.nasl - Type : ACT_GATHER_INFO
2013-09-23 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17176.nasl - Type : ACT_GATHER_INFO
2013-09-23 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17160.nasl - Type : ACT_GATHER_INFO
2013-09-22 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17197.nasl - Type : ACT_GATHER_INFO
2013-09-22 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17119.nasl - Type : ACT_GATHER_INFO
2013-09-21 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17191.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130919_polkit_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Scientific Linux host is missing one or more security updates.
File : sl_20130919_hplip_on_SL6_x.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Red Hat host is missing one or more security updates.
File : redhat-RHSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Oracle Linux host is missing one or more security updates.
File : oraclelinux_ELSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote Fedora host is missing a security update.
File : fedora_2013-17127.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-1274.nasl - Type : ACT_GATHER_INFO
2013-09-20 Name : The remote CentOS host is missing one or more security updates.
File : centos_RHSA-2013-1270.nasl - Type : ACT_GATHER_INFO
2013-09-19 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1953-1.nasl - Type : ACT_GATHER_INFO
2013-09-19 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1956-1.nasl - Type : ACT_GATHER_INFO
2013-09-19 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1959-1.nasl - Type : ACT_GATHER_INFO
2013-09-19 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1961-1.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
2
3
Date Informations
2014-02-17 11:44:03
  • Multiple Updates
2013-10-04 21:26:32
  • Multiple Updates
2013-10-04 13:25:17
  • Multiple Updates
2013-09-27 17:19:09
  • First insertion