|
|
Log in / Subscribe / Register

gksu-polkit: root privilege escalation

Package(s):gksu-polkit CVE #(s):CVE-2012-5617
Created:March 7, 2013 Updated:August 5, 2013
Description:

From the Red Hat Bugzilla entry:

Miroslav Trmac reported that gksu-polkit ships with an extremely permissive PolicyKit policy configuration file. Because gksu-polkit allows a user to execute a program with administrative privileges, and because the default allow_active setting is "auth_self" rather than "auth_admin", any local user can use gksu-polkit to execute arbitrary programs (like a bash shell) with root privileges.

Alerts:
Fedora FEDORA-2013-13616 gksu-polkit 2013-08-04
Fedora FEDORA-2013-13620 gksu-polkit 2013-08-04
Fedora FEDORA-2013-3032 gksu-polkit 2013-03-06

to post comments


Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds