CVE-2011-1485 Race condition in n/a
Local attackers can exploit a race condition in PolicyKit's pkexec utility to gain elevated privileges by executing setuid programs.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2011-1485?
CVE-2011-1485 is a medium-severity vulnerability in n/a, published on 31 May 2011. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.
Weakness: CWE-362
Which versions are affected by CVE-2011-1485?
It affects 1 product.
Linux distribution packages (20)
polkit Red Hat:enterprise_linux:6::client | All versions | 0:0.96-2.el6_0.1 |
polkit-debuginfo Red Hat:enterprise_linux:6::client | All versions | 0:0.96-2.el6_0.1 |
polkit-desktop-policy Red Hat:enterprise_linux:6::client | All versions | 0:0.96-2.el6_0.1 |
polkit-devel Red Hat:enterprise_linux:6::client | All versions | 0:0.96-2.el6_0.1 |
polkit-docs Red Hat:enterprise_linux:6::client | All versions | 0:0.96-2.el6_0.1 |
polkit Red Hat:enterprise_linux:6::computenode | All versions | 0:0.96-2.el6_0.1 |
polkit-debuginfo Red Hat:enterprise_linux:6::computenode | All versions | 0:0.96-2.el6_0.1 |
polkit-desktop-policy Red Hat:enterprise_linux:6::computenode | All versions | 0:0.96-2.el6_0.1 |
polkit-devel Red Hat:enterprise_linux:6::computenode | All versions | 0:0.96-2.el6_0.1 |
polkit-docs Red Hat:enterprise_linux:6::computenode | All versions | 0:0.96-2.el6_0.1 |
polkit Red Hat:enterprise_linux:6::server | All versions | 0:0.96-2.el6_0.1 |
polkit-debuginfo Red Hat:enterprise_linux:6::server | All versions | 0:0.96-2.el6_0.1 |
polkit-desktop-policy Red Hat:enterprise_linux:6::server | All versions | 0:0.96-2.el6_0.1 |
polkit-devel Red Hat:enterprise_linux:6::server | All versions | 0:0.96-2.el6_0.1 |
polkit-docs Red Hat:enterprise_linux:6::server | All versions | 0:0.96-2.el6_0.1 |
polkit Red Hat:enterprise_linux:6::workstation | All versions | 0:0.96-2.el6_0.1 |
polkit-debuginfo Red Hat:enterprise_linux:6::workstation | All versions | 0:0.96-2.el6_0.1 |
polkit-desktop-policy Red Hat:enterprise_linux:6::workstation | All versions | 0:0.96-2.el6_0.1 |
polkit-devel Red Hat:enterprise_linux:6::workstation | All versions | 0:0.96-2.el6_0.1 |
polkit-docs Red Hat:enterprise_linux:6::workstation | All versions | 0:0.96-2.el6_0.1 |
Products include Redhat Policykit.
How do I fix CVE-2011-1485?
Apply the vendor's patch.
Is CVE-2011-1485 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-1485 exists.
Public exploit code: 1 Metasploit module, 3 Exploit-DB entries and 2 proofs of concept on GitHub.
Sources
Also known as DEBIAN-CVE-2011-1485, DSA-2319-1, GHSA-mjm4-2fq8-2392, RHSA-2011:0455.