CVE ID:	CVE-2013-4288
Description:	Race condition in PolicyKit (aka polkit) allows local users to bypass intended PolicyKit restrictions and gain privileges by starting a setuid or pkexec process before the authorization check is performed, related to (1) the polkit_unix_process_new API function, (2) the dbus API, or (3) the --process (unix-process) option for authorization to pkcheck.
Test IDs:	1.3.6.1.4.1.25623.1.0.841557   1.3.6.1.4.1.25623.1.0.866911   1.3.6.1.4.1.25623.1.0.123569   1.3.6.1.4.1.25623.1.0.881795   1.3.6.1.4.1.25623.1.0.871041   1.3.6.1.4.1.25623.1.0.866915
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4288 RHSA-2013:1270 http://rhn.redhat.com/errata/RHSA-2013-1270.html RHSA-2013:1460 http://rhn.redhat.com/errata/RHSA-2013-1460.html USN-1953-1 http://www.ubuntu.com/usn/USN-1953-1 [oss-security] 20130918 Fwd: [vs-plain] polkit races http://www.openwall.com/lists/oss-security/2013/09/18/4 [oss-security] 20130918 Re: Fwd: [vs-plain] polkit races http://seclists.org/oss-sec/2013/q3/626 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1002375 openSUSE-SU-2013:1527 http://lists.opensuse.org/opensuse-updates/2013-10/msg00004.html openSUSE-SU-2013:1528 http://lists.opensuse.org/opensuse-updates/2013-10/msg00005.html openSUSE-SU-2013:1617 http://lists.opensuse.org/opensuse-updates/2013-10/msg00062.html openSUSE-SU-2013:1620 http://lists.opensuse.org/opensuse-updates/2013-11/msg00000.html