VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 3, 2013· Updated Jun 16, 2026

CVE-2013-1065

CVE-2013-1065

Description

backend.py in Jockey before 0.9.7-0ubuntu7.11 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended access restrictions by leveraging a PolkitUnixProcess PolkitSubject race condition via a (1) setuid process or (2) pkexec process, a related issue to CVE-2013-4288.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Martin Pitt/Jockey11 versions
    cpe:2.3:a:martin_pitt:jockey:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:martin_pitt:jockey:*:*:*:*:*:*:*:*range: <=0.9.7-0ubuntu7.10
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.8:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7.9:*:*:*:*:*:*:*
    • cpe:2.3:a:martin_pitt:jockey:0.9.7-0ubuntu7:*:*:*:*:*:*:*
  • Canonical/Ubuntu Linux
    cpe:2.3:o:canonical:ubuntu_linux:12.04:-:lts:*:*:*:*:*
  • Ubuntu/Jockeyllm-create
    Range: <0.9.7-0ubuntu7.11

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.