CVE-2013-4325

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a…

published September 23, 2013

CVSS
—
EPSS
0%
Percentile
35.2
In the wild
Unconfirmed
What it is

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00419 · 35.2th percentile
Published
2013-09-23T10:00Z
EPSS history
Timeline
  • 23 SEP 10:00Z
    The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a…
    cvelistv5