Description
PolicyKit 0.103 sets the AdminIdentities to "wheel" by default, which allows local users in the wheel group to gain root privileges without authentication.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | policykit-1 | 0.103-1 | — |
| Debian 13 | policykit-1 | 0.103-1 | — |
| Debian 12 | policykit-1 | 0.103-1 | — |
References
- [oss-security] 20120327 Re: CVE Request: PolicyKit change allows users in "wheel" group to become root without a password mailing-list
- https://bugs.gentoo.org/show_bug.cgi?id=401513
- http://patch-tracker.debian.org/patch/series/view/policykit-1/0.104-2/05_revert-admin-identities-unix-group-wheel.patch
- https://launchpad.net/ubuntu/+source/policykit-1/0.103-1
- [polkit-devel] 20111206 polkit 0.103 mailing-list
- GLSA-201204-06 vendor-advisory
- 48817 third-party-advisory
- http://cgit.freedesktop.org/PolicyKit/commit/?id=763faf434b445c20ae9529100d3ef5290976d0c9
- [oss-security] 20120327 CVE Request: PolicyKit change allows users in "wheel" group to become root without a password mailing-list