Unscored severity · published Apr 6, 2010
CVE-2010-0750
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument
–
CVSS
0.5%
EPSS
No
On KEV
Description
pkexec.c in pkexec in libpolkit in PolicyKit 0.96 allows local users to determine the existence of arbitrary files via the argument.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PO
Policykit · Freedesktop
0.96 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0750
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0750
Exploit
http://bugs.freedesktop.org/show_bug.cgi?id=26982
Exploit
http://cgit.freedesktop.org/PolicyKit/commit/?id=14bdfd816512a82b1ad258fa143ae5faa945df8a
marc.info
http://marc.info/?l=oss-security&m=127014095301235&w=2
marc.info
http://marc.info/?l=oss-security&m=127014999113790&w=2
Vendor Advisory
http://secunia.com/advisories/39149
secunia.com
http://secunia.com/advisories/48817
More from Policykit
–
CVE-2008-1658
Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute…