Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

A local attacker can use a vulnerability in polkit, used by rtkit,
in order to escalate his privileges.

Impacted products: Fedora, MBS, RHEL, Unix (platform)

Severity: 2/4

Creation date: 20/09/2013

DESCRIPTION OF THE VULNERABILITY

The bulletin VIGILANCE-VUL-13454 (https://vigilance.fr/tree/1/13454?w=66901)
describes a vulnerability of polkit which allows a local attacker
to elevate his privileges.

The rtkit product uses the DBUS API of polkit, so it is also
impacted by this vulnerability.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/rtkit-privilege-escalation-via-polkit-13458