CVE-2013-1061 - CVE House
Back to Database
Status published Medium CVE-2013-1061

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3,...

Vulnerability Description

dbus/SoftwarePropertiesDBus.py in Software Properties 0.92.17 before 0.92.17.3, 0.92.9 before 0.92.9.3, and 0.82.7 before 0.82.7.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-1061

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

marc deslauriers

View all reports →

Affected Software

software-properties, ubuntu linux
Vulnerable Versions:
0.82.7, 0.82.7.1, 0.82.7.2, 0.82.7.3, 0.82.7.4, 0.92.9, 0.92.9.1, 0.92.9.2, 0.92.17, 0.92.17.1, 0.92.17.2, 12.04, 12.10, 13.04

Timeline

Official Publish: October 3rd, 2013
Last Modified: August 6th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.