PT-2008-3210 · Policykit · Policykit

Kees

+1

·

Publicado

2008-04-11

·

Atualizado

2017-08-08

·

CVE-2008-1658

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions PolicyKit versions 0.7 and earlier
Description The issue is related to a format string vulnerability in the grant helper of PolicyKit. This vulnerability allows attackers to cause a denial of service, potentially leading to a crash, and may also enable the execution of arbitrary code. The vulnerability is triggered by format strings in a password.
Recommendations For versions 0.7 and earlier, consider updating to a version later than 0.7 to resolve the issue. As a temporary workaround, restrict the use of the grant helper to minimize the risk of exploitation.

Exploit

Correção

Use of Externally-Controlled Format String

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2008-1658

Produtos afetados

Policykit