CVE-2010-4664

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
consolekit	consolekit	before 0.4.2

References

https://access.redhat.com/security/cve/cve-2010-4664Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-4664Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-4664Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-4664Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-4664Third Party Advisory

Timeline

Published: Nov 13, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-46654.3Integer overflow in the ReadDirectory function in tiffdump.c in tiffdump in LibTIFF before 3.9.5 allows remote attackers to cause a denial o CVE-2010-46667.5Buffer overflow in libarchive 3.0 pre-release code allows remote attackers to cause a denial of service (application crash) or possibly have CVE-2010-46674.3Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web scr CVE-2010-46684.7The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.37-rc7 allows local users to cause a denial of service (p CVE-2010-46697.8The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows S CVE-2010-46707.8The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with s CVE-2010-46717.8The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS before 15.0(1)XA5 allows remote attackers to cause a deni CVE-2010-46727.8Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of se CVE-2010-46737.8Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of se CVE-2010-46747.8Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote att CVE-2010-46759.0Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) do not properly determine the interfaces for which CVE-2010-46766.8Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenti