CVE-2013-4161

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

Vendor	Product	Versions
gksu-polkit-0.0.3-6.fc18	gksu-polkit-0.0.3-6.fc18	0.0.3-6.fc18

References

http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.htmlMailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2013-4161Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4161Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4161Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113182.htmlMailing List, Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2013-August/113218.htmlMailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2013-4161Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-4161Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2013-4161Third Party Advisory

Timeline

Published: Dec 31, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2013

CVE-2013-41624.7The udp_v6_push_pending_frames function in net/ipv6/udp.c in the IPv6 implementation in the Linux kernel through 3.10.3 makes an incorrect f CVE-2013-41634.7The ip6_append_data_mtu function in net/ipv6/ip6_output.c in the IPv6 implementation in the Linux kernel through 3.10.3 does not properly ma CVE-2013-41646.8Heap-based buffer overflow in Ruby 1.8, 1.9 before 1.9.3-p484, 2.0 before 2.0.0-p353, 2.1 before 2.1.0 preview2, and trunk before revision 4 CVE-2013-41654.3The HTTPAuthorized function in bitcoinrpc.cpp in bitcoind 0.8.1 provides information about authentication failure upon detecting the first i CVE-2013-41667.5The gpg_ctx_add_recipient function in camel/camel-gpg-context.c in GNOME Evolution 3.8.4 and earlier and Evolution Data Server 3.9.5 and ear CVE-2013-41674.3Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) before 1.11.7 allows remote attackers to inject arbitrary web script or CVE-2013-41686.1Cross-site scripting (XSS) vulnerability in SmokePing 2.6.9 in the start and end time fields.CVE-2013-41696.9GNOME Display Manager (gdm) before 2.21.1 allows local users to change permissions of arbitrary directories via a symlink attack on /tmp/.X1 CVE-2013-41706.1In general, Ember.js escapes or strips any user-supplied content before inserting it in strings that will be sent to innerHTML. However, the CVE-2013-41714.3Multiple cross-site scripting (XSS) vulnerabilities in Apache Roller before 5.0.2 allow remote attackers to inject arbitrary web script or H CVE-2013-41728.5The Red Hat CloudForms Management Engine 5.1 allow remote administrators to execute arbitrary Ruby code via unspecified vectors.CVE-2013-41735.0Directory traversal vulnerability in the trend-data daemon (xymond_rrd) in Xymon 4.x before 4.3.12 allows remote attackers to delete arbitra