CVE-2013-4325
Published Sep 23, 2013
Last updated 11 years ago
Overview
- Description
- The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.9
- Impact score
- 10
- Exploitability score
- 3.4
- Vector string
- AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "192016D2-A147-4E0D-9484-3A85AAC57B26"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC3F33C0-42A3-4836-B3F7-BD6DC90D581B"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:2.7.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04D83AD2-75FF-4217-8B1F-3436EABD9C01"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE0F0C34-1C19-4487-8A36-23DD04E8DFED"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E7E4C2F-71D7-4953-BF24-BDD3430D08B7"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.4b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D4F5DF5-171D-4843-BF89-67C462342657"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6008F293-264E-4148-92C7-5A8243673A7B"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1DCD43B-6103-4C0C-8EFB-ADA8A3E8FEFC"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "151627C7-DCCD-424D-ABC8-4BE9DB7E748E"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.9.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7EEFACF4-127C-42E4-8EDF-DDD0EC415622"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1A84A4A-6DD8-41E4-B6D8-A18DC67883B7"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C27C896-AC89-4BFC-938A-4A3BE23B4487"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDFE0033-5404-4E74-A7C8-FFB576BFA9AE"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.10.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "525CAF0A-0B21-47CA-A674-7DF64207E4C5"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BF339BD9-AA5E-48CD-BF2C-0E8469DDFC3D"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB1B7A9-AEA3-4A96-AC94-9F3350664B47"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.3a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E27837F2-C9D5-45CF-8869-C83172C3371C"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78208489-E8A2-4F7C-9096-BA342139962D"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5029D05B-0DCF-41FD-AF3C-B7312E220D97"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BAEBB287-9DC1-455A-B73E-1838E6F840FE"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B47057FC-96B9-456F-844F-C915C84E2AB8"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63E6D63C-D3CA-4A01-AFA6-6E2129983EF8"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F3540FCB-9CDD-4362-9B3C-41E8210A9200"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B43AA8A1-0281-4505-BC35-A13799FFEDA7"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ACFDDBB-4A4D-4C06-9A29-D2D29007DA21"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.10:a:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2E037A4C-017A-47AC-94CD-26789565824A"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.12.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEE5AEB9-67EB-446A-ADEF-AAAE22126440"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8296FFAB-93AD-4BD0-9C81-59CA1E5E3F83"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AECE11A-1551-45EF-87BB-CA2B43C3157E"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71545825-5223-4474-A853-A4AD7C6B1978"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4734A2C-F6C2-4F45-886B-9D864540F4F3"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691FC45F-92D0-4CC1-9810-4B45C57ED458"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62BAD743-7E11-4C54-8E00-884812860D3C"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E686647F-D0D5-4AF7-82AF-3D79F8CF6760"
},
{
"criteria": "cpe:2.3:a:hp:linux_imaging_and_printing_project:3.13.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49DF3966-14B0-49C3-A570-28C9580470FC"
}
],
"operator": "OR"
}
]
}
]