漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
The _checkPolkitPrivilege function in serviceHelper.py in Back In Time (aka backintime) 1.1.18 and earlier uses a deprecated polkit authorization method (unix-process) that is subject to a race condition (time of check, time of use). With this authorization method, the owner of a process requesting a polkit operation is checked by polkitd via /proc/<pid>/status, by which time the requesting process may have been replaced by a different process with the same PID that has different privileges then the original requester.
漏洞信息
N/A
漏洞
N/A
漏洞
Back In Time 竞争条件漏洞
漏洞信息
Back In Time(又名backintime)是一套Linux备份工具。 Back In Time 1.1.18及之前的版本中的serviceHelper.py文件的‘_checkPolkitPrivilege’函数存在竞争条件漏洞。攻击者可利用该漏洞替换用户的请求进程。
漏洞信息
N/A
漏洞
N/A