CVE-2013-1061 in Software-properties信息

摘要

由 VulDB • 2026-07-13

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2013-01-11

披露

2013-10-03

管理

已接受

条目

VDB-65182

CPE

准备好

CWE

CWE-264 (已确认)

CVSS

4.6 (NVD)

EPSS

0.00361

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2013-1061
NVD	https://nvd.nist.gov/vuln/detail/CVE-2013-1061
CVE Details	https://www.cvedetails.com/cve/CVE-2013-1061/

◂ 上一步一览下一步 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!