Unscored severity · published May 3, 2011
CVE-2011-1842
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv…
–
CVSS
0.4%
EPSS
No
On KEV
Description
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
Language-selector · Ubuntu
through 0.6.6; 0.0+baz20050531; 0.0+baz20050609; 0.0+baz20050614; 0.0+baz20050808; 0.0+baz20050811; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-1842
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-1842
Vendor Advisory
http://secunia.com/advisories/44214
Patch
http://www.securityfocus.com/bid/47502
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1115-1/
www.ubuntuupdates.org
http://www.ubuntuupdates.org/packages/show/307975
Vendor Advisory
http://www.vupen.com/english/advisories/2011/1032
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/67255
More from Language-selector
–
CVE-2011-0729
dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to…