pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/57543 | vdb entry |
http://marc.info/?l=oss-security&m=127014095301235&w=2 | mailing list |
http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a | patch exploit |
http://secunia.com/advisories/39149 | third party advisory vendor advisory |
http://bugs.freedesktop.org/show_bug.cgi?id=26982 | patch exploit |
https://launchpad.net/bugs/532852 | exploit |
http://security.gentoo.org/glsa/glsa-201204-06.xml | vendor advisory |
http://secunia.com/advisories/48817 | third party advisory |
http://marc.info/?l=oss-security&m=127014999113790&w=2 | mailing list |