KDE kdelibs before 4.14 and kauth before 5.1 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, related to CVE-2013-4288 and "PID reuse race conditions."
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2014-08-19T18:00:00
Updated: 2014-10-14T12:57:01
Reserved: 2014-07-22T00:00:00
Link: CVE-2014-5033
JSON object: View
NVD Information
Status : Modified
Published: 2014-08-19T18:55:03.233
Modified: 2014-10-16T07:22:55.077
Link: CVE-2014-5033
JSON object: View
Redhat Information
No data.
CWE