ByteOS Network

Vulnerability Details :

CVE-2011-4945

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-01 Oct, 2012 | 23:00

Updated At-07 Aug, 2024 | 00:23

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:01 Oct, 2012 | 23:00

Updated At:07 Aug, 2024 | 00:23

▼CVE Numbering Authority (CNA)

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2012/03/28/2	mailing-list x_refsource_MLIST
https://bugs.gentoo.org/show_bug.cgi?id=401513	x_refsource_MISC
http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch	x_refsource_CONFIRM
https://launchpad.net/ubuntu/+source/policykit-1/0.103-1	x_refsource_CONFIRM
http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html	mailing-list x_refsource_MLIST
http://security.gentoo.org/glsa/glsa-201204-06.xml	vendor-advisory x_refsource_GENTOO
http://secunia.com/advisories/48817	third-party-advisory x_refsource_SECUNIA
http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/03/28/1	mailing-list x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/28/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: https://bugs.gentoo.org/show_bug.cgi?id=401513

Resource:

x_refsource_MISC

Hyperlink: http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch

Resource:

x_refsource_CONFIRM

Hyperlink: https://launchpad.net/ubuntu/+source/policykit-1/0.103-1

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://security.gentoo.org/glsa/glsa-201204-06.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Hyperlink: http://secunia.com/advisories/48817

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/28/1

Resource:

mailing-list

x_refsource_MLIST

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.openwall.com/lists/oss-security/2012/03/28/2	mailing-list x_refsource_MLIST x_transferred
https://bugs.gentoo.org/show_bug.cgi?id=401513	x_refsource_MISC x_transferred
http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch	x_refsource_CONFIRM x_transferred
https://launchpad.net/ubuntu/+source/policykit-1/0.103-1	x_refsource_CONFIRM x_transferred
http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html	mailing-list x_refsource_MLIST x_transferred
http://security.gentoo.org/glsa/glsa-201204-06.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/48817	third-party-advisory x_refsource_SECUNIA x_transferred
http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2012/03/28/1	mailing-list x_refsource_MLIST x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/28/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: https://bugs.gentoo.org/show_bug.cgi?id=401513

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://launchpad.net/ubuntu/+source/policykit-1/0.103-1

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://security.gentoo.org/glsa/glsa-201204-06.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Hyperlink: http://secunia.com/advisories/48817

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2012/03/28/1

Resource:

mailing-list

x_refsource_MLIST

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:01 Oct, 2012 | 23:55

Updated At:11 Apr, 2025 | 00:51

PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C
Primary	2.0	6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 6.9

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 6.9

Base severity: MEDIUM

Vector:

AV:L/AC:M/Au:N/C:C/I:C/A:C

CPE Matches

michael_biebl>>policykit>>0.103

cpe:2.3:a:michael_biebl:policykit:0.103:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9	secalert@redhat.com	N/A
http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch	secalert@redhat.com	N/A
http://secunia.com/advisories/48817	secalert@redhat.com	N/A
http://security.gentoo.org/glsa/glsa-201204-06.xml	secalert@redhat.com	N/A
http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2012/03/28/1	secalert@redhat.com	N/A
http://www.openwall.com/lists/oss-security/2012/03/28/2	secalert@redhat.com	N/A
https://bugs.gentoo.org/show_bug.cgi?id=401513	secalert@redhat.com	N/A
https://launchpad.net/ubuntu/+source/policykit-1/0.103-1	secalert@redhat.com	N/A
http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9	af854a3a-2127-422b-91ae-364da2661108	N/A
http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/48817	af854a3a-2127-422b-91ae-364da2661108	N/A
http://security.gentoo.org/glsa/glsa-201204-06.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mail-archive.com/polkit-devel%40lists.freedesktop.org/msg00327.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2012/03/28/1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.openwall.com/lists/oss-security/2012/03/28/2	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.gentoo.org/show_bug.cgi?id=401513	af854a3a-2127-422b-91ae-364da2661108	N/A
https://launchpad.net/ubuntu/+source/policykit-1/0.103-1	af854a3a-2127-422b-91ae-364da2661108	N/A