Unscored severity · published Apr 29, 2011
CVE-2011-0729
dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to…
–
CVSS
0.3%
EPSS
No
On KEV
Description
dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
Language-selector · Ubuntu
through 0.6.6; 0.0+baz20050531; 0.0+baz20050609; 0.0+baz20050614; 0.0+baz20050808; 0.0+baz20050811; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0729
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0729
Vendor Advisory
http://secunia.com/advisories/44214
Patch
http://www.securityfocus.com/bid/47502
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1115-1/
www.ubuntuupdates.org
http://www.ubuntuupdates.org/packages/show/307975
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1032
launchpad.net
https://launchpad.net/bugs/764397
More from Language-selector
–
CVE-2011-1842
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv…