CVE-2010-4664

Summary

In ConsoleKit before 0.4.2, an intended security policy restriction bypass was found. This flaw allows an authenticated system user to escalate their privileges by initiating a remote VNC session.

Affected Software

VendorProductVersion RangeStatus
consolekitconsolekitbefore 0.4.2affected

Weaknesses

  • Policy restrictions break-out via remote Virtual Network Computing (VNC) session

ADP Enrichment

CVE Program Container

Additional References

References