Description
Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in a password.
References (9)
Core 9
Core References
Issue Tracking x_refsource_confirm
https://bugs.launchpad.net/ubuntu/+source/policykit/+bug/205037
Vendor Advisory vendor-advisory
x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:087
Various Sources x_refsource_confirm
http://gitweb.freedesktop.org/?p=PolicyKit.git%3Ba=commitdiff%3Bh=5bc86a14cc0e356bcf8b5f861674f842869b1be7
Various Sources x_refsource_confirm
http://bugs.freedesktop.org/show_bug.cgi?id=15295
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41877
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/28702
Vendor Advisory vendor-advisory
x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00176.html
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1254
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/29755
Scores
EPSS
0.0068
EPSS Percentile
47.3%
Details
CWE
CWE-134
Status
published
Products (2)
freedesktop/policykit
0.6
freedesktop/policykit
< 0.7
Published
Apr 11, 2008
Tracked Since
Feb 18, 2026