peter bassill · operator
$ cve CVE-2011-1485 JSON

CVE-2011-1485 EXPLOIT

6.9
MEDIUM · CVSS 2.0 · EPSS 5.2% (pctl 92)

Patch early

A public exploit exists.

Description

Race condition in the pkexec utility and polkitd daemon in PolicyKit (aka polkit) 0.96 allows local users to gain privileges by executing a setuid program from pkexec, related to the use of the effective user ID instead of the real user ID.

Scoring

CVSS6.9 (MEDIUM, v2.0)
VectorAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS5.25% — more likely to be exploited than 92% of all CVEs
WeaknessCWE-362
On CISA KEVno
Public exploityes
Published2011-05-31
Last modified2026-06-16

Affected (1)

VendorProduct
redhatpolicykit

Public exploits

SourceTitleDate
exploit-dbLinux PolicyKit - Race Condition Privilege Escalation (Metasploit)2014-10-20
exploit-dbpkexec - Race Condition Privilege Escalation2011-10-08
exploit-dbPolicyKit polkit-1 < 0.101 - Local Privilege Escalation2011-10-05

References

→ the Explorer  ·  watch your stack  ·  NVD