Vulnetix
Try Vulnetix Request Demo
CVE-2013-4325 PUBLISHED CVSS 6.900000095367432 MEDIUM

The check_permission_v1 function in base/pkit.py in HP Linux Imaging and Printing (HPLIP) through 3.13.9 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process.

EPSS 0.07% · 20.0th percentile

Risk Scores

CVSS v2.0
6.900000095367432
EPSS Score
0.07%
20.0th percentile

Affected Products

VendorProductVersions
n/an/an/a
hplinux_imaging_and_printing_project1.0, 2.0, 2.7.10

Timeline

References

Open in Interactive Console →