Search

Find a vulnerability

Search criteria

    2 vulnerabilities by usb-creator_project

    CVE-2015-3643 (GCVE-0-2015-3643)

    Vulnerability from nvd – Published: 2017-09-27 15:00 – Updated: 2024-08-06 05:47
    VLAI
    Summary
    usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://usn.ubuntu.com/usn/usn-2576-2/ vendor-advisoryx_refsource_UBUNTU
    https://www.exploit-db.com/exploits/36820/ exploitx_refsource_EXPLOIT-DB
    https://bazaar.launchpad.net/~usb-creator-hackers… x_refsource_MISC
    http://www.openwall.com/lists/oss-security/2015/05/04/3 mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/usn/usn-2576-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.securityfocus.com/bid/74304 vdb-entryx_refsource_BID
    http://www.openwall.com/lists/oss-security/2015/0… mailing-listx_refsource_MLIST
    Date Public
    2015-04-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T05:47:57.792Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "USN-2576-2",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
              },
              {
                "name": "36820",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/36820/"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
              },
              {
                "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
              },
              {
                "name": "USN-2576-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
              },
              {
                "name": "74304",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/74304"
              },
              {
                "name": "[oss-security] 20150422 USBCreator D-Bus service",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2015-04-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-27T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "USN-2576-2",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
            },
            {
              "name": "36820",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/36820/"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
            },
            {
              "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
            },
            {
              "name": "USN-2576-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
            },
            {
              "name": "74304",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/74304"
            },
            {
              "name": "[oss-security] 20150422 USBCreator D-Bus service",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2015-3643",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "USN-2576-2",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
                },
                {
                  "name": "36820",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/36820/"
                },
                {
                  "name": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470",
                  "refsource": "MISC",
                  "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
                },
                {
                  "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
                },
                {
                  "name": "USN-2576-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
                },
                {
                  "name": "74304",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/74304"
                },
                {
                  "name": "[oss-security] 20150422 USBCreator D-Bus service",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2015-3643",
        "datePublished": "2017-09-27T15:00:00.000Z",
        "dateReserved": "2015-05-04T00:00:00.000Z",
        "dateUpdated": "2024-08-06T05:47:57.792Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2015-3643 (GCVE-0-2015-3643)

    Vulnerability from cvelistv5 – Published: 2017-09-27 15:00 – Updated: 2024-08-06 05:47
    VLAI
    Summary
    usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    https://usn.ubuntu.com/usn/usn-2576-2/ vendor-advisoryx_refsource_UBUNTU
    https://www.exploit-db.com/exploits/36820/ exploitx_refsource_EXPLOIT-DB
    https://bazaar.launchpad.net/~usb-creator-hackers… x_refsource_MISC
    http://www.openwall.com/lists/oss-security/2015/05/04/3 mailing-listx_refsource_MLIST
    https://usn.ubuntu.com/usn/usn-2576-1/ vendor-advisoryx_refsource_UBUNTU
    http://www.securityfocus.com/bid/74304 vdb-entryx_refsource_BID
    http://www.openwall.com/lists/oss-security/2015/0… mailing-listx_refsource_MLIST
    Date Public
    2015-04-22 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T05:47:57.792Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "USN-2576-2",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
              },
              {
                "name": "36820",
                "tags": [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
                  "x_transferred"
                ],
                "url": "https://www.exploit-db.com/exploits/36820/"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
              },
              {
                "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
              },
              {
                "name": "USN-2576-1",
                "tags": [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
                  "x_transferred"
                ],
                "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
              },
              {
                "name": "74304",
                "tags": [
                  "vdb-entry",
                  "x_refsource_BID",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/74304"
              },
              {
                "name": "[oss-security] 20150422 USBCreator D-Bus service",
                "tags": [
                  "mailing-list",
                  "x_refsource_MLIST",
                  "x_transferred"
                ],
                "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "n/a",
              "vendor": "n/a",
              "versions": [
                {
                  "status": "affected",
                  "version": "n/a"
                }
              ]
            }
          ],
          "datePublic": "2015-04-22T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "n/a",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2017-09-27T14:57:01.000Z",
            "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            "shortName": "mitre"
          },
          "references": [
            {
              "name": "USN-2576-2",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
            },
            {
              "name": "36820",
              "tags": [
                "exploit",
                "x_refsource_EXPLOIT-DB"
              ],
              "url": "https://www.exploit-db.com/exploits/36820/"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
            },
            {
              "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
            },
            {
              "name": "USN-2576-1",
              "tags": [
                "vendor-advisory",
                "x_refsource_UBUNTU"
              ],
              "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
            },
            {
              "name": "74304",
              "tags": [
                "vdb-entry",
                "x_refsource_BID"
              ],
              "url": "http://www.securityfocus.com/bid/74304"
            },
            {
              "name": "[oss-security] 20150422 USBCreator D-Bus service",
              "tags": [
                "mailing-list",
                "x_refsource_MLIST"
              ],
              "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "cve@mitre.org",
              "ID": "CVE-2015-3643",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "n/a",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "n/a"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "n/a"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging a missing call check_polkit for the KVMTest method."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "n/a"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "USN-2576-2",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/usn/usn-2576-2/"
                },
                {
                  "name": "36820",
                  "refsource": "EXPLOIT-DB",
                  "url": "https://www.exploit-db.com/exploits/36820/"
                },
                {
                  "name": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470",
                  "refsource": "MISC",
                  "url": "https://bazaar.launchpad.net/~usb-creator-hackers/usb-creator/trunk/revision/470"
                },
                {
                  "name": "[oss-security] 20150504 Re: USBCreator D-Bus service",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2015/05/04/3"
                },
                {
                  "name": "USN-2576-1",
                  "refsource": "UBUNTU",
                  "url": "https://usn.ubuntu.com/usn/usn-2576-1/"
                },
                {
                  "name": "74304",
                  "refsource": "BID",
                  "url": "http://www.securityfocus.com/bid/74304"
                },
                {
                  "name": "[oss-security] 20150422 USBCreator D-Bus service",
                  "refsource": "MLIST",
                  "url": "http://www.openwall.com/lists/oss-security/2015/04/22/12"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "assignerShortName": "mitre",
        "cveId": "CVE-2015-3643",
        "datePublished": "2017-09-27T15:00:00.000Z",
        "dateReserved": "2015-05-04T00:00:00.000Z",
        "dateUpdated": "2024-08-06T05:47:57.792Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }