CVE-2013-1064: apt-xapian-index before 0.45ubuntu2.1, 0.44ubuntu7.1, and 0.44ubuntu5.1 does not properly use D-Bus for com...

Security readout for executives and security teams

This Ubuntu apt-xapian-index issue could let a local user bypass intended access controls through a D-Bus and polkit race condition. The supplied sources do not show remote exploitation, active exploitation, or CVSS severity, so urgency depends on whether affected Ubuntu package versions remain installed. Exposure is likely limited to Ubuntu systems with vulnerable apt-xapian-index package versions installed. The source bundle does not identify other distributions, products, CPEs, or service-facing attack surface. Treat this as a targeted hygiene item for older Ubuntu environments, especially shared systems. It is not shown as internet-exploitable or actively exploited in the supplied evidence, but stale vulnerable packages can weaken local privilege and access-control boundaries. Mitigation focus: Update apt-xapian-index to the fixed Ubuntu package for the installed release.; Review Ubuntu USN-1955-1 for release-specific update guidance.; Prioritize shared multi-user Ubuntu systems where local users have shell access..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.