Privilege Escalation Vulnerability in Linux PolicyKit

Privilege Escalation Vulnerability in Linux PolicyKit

Release date:
Updated on:

Affected Systems:
PolicyKit
Description:
CVE (CAN) ID: CVE-2011-1485

Policykit is a framework for managing policies and permissions.

PolicyKit (polkit) version 0.96 is subject to competition in the implementation of pkexec and polkitd programs. Local Users can exploit this vulnerability to obtain elevated permissions.

<* Source: Neel Mehta
*>

Suggestion:
Vendor patch:

PolicyKit
---------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://packages.debian.org/search? Searchon = sourcenames & keywords = policykit-1

This article permanently updates the link address: