CVE-2011-1842

dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
ubuntulanguage-selector
𝑥
≤ 0.6.6
ubuntulanguage-selector
0.0\+baz20050531
ubuntulanguage-selector
0.0\+baz20050609
ubuntulanguage-selector
0.0\+baz20050614
ubuntulanguage-selector
0.0\+baz20050808
ubuntulanguage-selector
0.0\+baz20050811
ubuntulanguage-selector
0.0\+baz20050819
ubuntulanguage-selector
0.0\+baz20050819.2
ubuntulanguage-selector
0.0\+baz20050822
ubuntulanguage-selector
0.0\+baz20050823
ubuntulanguage-selector
0.0\+baz20050824
ubuntulanguage-selector
0.0\+baz20050912
ubuntulanguage-selector
0.0\+baz20050926
ubuntulanguage-selector
0.0\+baz20050927
ubuntulanguage-selector
0.1
ubuntulanguage-selector
0.1.1
ubuntulanguage-selector
0.1.2
ubuntulanguage-selector
0.1.3
ubuntulanguage-selector
0.1.4
ubuntulanguage-selector
0.1.5
ubuntulanguage-selector
0.1.6
ubuntulanguage-selector
0.1.7
ubuntulanguage-selector
0.1.8
ubuntulanguage-selector
0.1.9
ubuntulanguage-selector
0.1.10
ubuntulanguage-selector
0.1.11
ubuntulanguage-selector
0.1.12
ubuntulanguage-selector
0.1.13
ubuntulanguage-selector
0.1.14
ubuntulanguage-selector
0.1.15
ubuntulanguage-selector
0.1.16
ubuntulanguage-selector
0.1.17
ubuntulanguage-selector
0.1.18
ubuntulanguage-selector
0.1.19
ubuntulanguage-selector
0.1.20
ubuntulanguage-selector
0.1.21
ubuntulanguage-selector
0.1.22
ubuntulanguage-selector
0.1.23
ubuntulanguage-selector
0.1.24
ubuntulanguage-selector
0.1.25
ubuntulanguage-selector
0.1.26
ubuntulanguage-selector
0.1.27
ubuntulanguage-selector
0.1.28
ubuntulanguage-selector
0.1.29
ubuntulanguage-selector
0.1.30
ubuntulanguage-selector
0.2.0
ubuntulanguage-selector
0.2.1
ubuntulanguage-selector
0.2.2
ubuntulanguage-selector
0.2.3
ubuntulanguage-selector
0.2.4
ubuntulanguage-selector
0.2.5
ubuntulanguage-selector
0.2.6
ubuntulanguage-selector
0.2.7
ubuntulanguage-selector
0.2.8
ubuntulanguage-selector
0.2.9
ubuntulanguage-selector
0.2.10
ubuntulanguage-selector
0.3.0
ubuntulanguage-selector
0.3.1
ubuntulanguage-selector
0.3.2
ubuntulanguage-selector
0.3.3
ubuntulanguage-selector
0.3.4
ubuntulanguage-selector
0.3.5
ubuntulanguage-selector
0.3.6
ubuntulanguage-selector
0.3.7
ubuntulanguage-selector
0.3.8
ubuntulanguage-selector
0.3.9
ubuntulanguage-selector
0.3.10
ubuntulanguage-selector
0.3.11
ubuntulanguage-selector
0.3.12
ubuntulanguage-selector
0.3.13
ubuntulanguage-selector
0.3.14
ubuntulanguage-selector
0.3.15
ubuntulanguage-selector
0.3.16
ubuntulanguage-selector
0.3.17
ubuntulanguage-selector
0.3.20
ubuntulanguage-selector
0.3.21
ubuntulanguage-selector
0.4.0
ubuntulanguage-selector
0.4.1
ubuntulanguage-selector
0.4.2
ubuntulanguage-selector
0.4.2.1
ubuntulanguage-selector
0.4.2.2
ubuntulanguage-selector
0.4.2.3
ubuntulanguage-selector
0.4.3
ubuntulanguage-selector
0.4.4
ubuntulanguage-selector
0.4.5
ubuntulanguage-selector
0.4.6
ubuntulanguage-selector
0.4.7
ubuntulanguage-selector
0.4.8
ubuntulanguage-selector
0.4.9
ubuntulanguage-selector
0.4.10
ubuntulanguage-selector
0.4.11
ubuntulanguage-selector
0.4.12
ubuntulanguage-selector
0.4.13
ubuntulanguage-selector
0.4.14
ubuntulanguage-selector
0.4.15
ubuntulanguage-selector
0.4.16
ubuntulanguage-selector
0.4.17
ubuntulanguage-selector
0.4.18
ubuntulanguage-selector
0.4.19
ubuntulanguage-selector
0.5.0
ubuntulanguage-selector
0.5.1
ubuntulanguage-selector
0.5.2
ubuntulanguage-selector
0.5.3
ubuntulanguage-selector
0.5.4
ubuntulanguage-selector
0.5.5
ubuntulanguage-selector
0.5.6
ubuntulanguage-selector
0.5.7
ubuntulanguage-selector
0.6.0
ubuntulanguage-selector
0.6.1
ubuntulanguage-selector
0.6.2
ubuntulanguage-selector
0.6.3
ubuntulanguage-selector
0.6.4
ubuntulanguage-selector
0.6.5
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
language-selector
natty
Fixed 0.33
released
maverick
Fixed 0.6.7
released
lucid
not-affected
karmic
not-affected
hardy
not-affected
dapper
not-affected
Common Weakness Enumeration
References
http://secunia.com/advisories/44214
http://www.securityfocus.com/bid/47502
http://www.ubuntu.com/usn/USN-1115-1/
http://www.ubuntuupdates.org/packages/show/307975
http://www.vupen.com/english/advisories/2011/1032
https://exchange.xforce.ibmcloud.com/vulnerabilities/67255
https://launchpad.net/bugs/764397
https://launchpad.net/ubuntu/+source/language-selector/0.6.7
http://secunia.com/advisories/44214
http://www.securityfocus.com/bid/47502
http://www.ubuntu.com/usn/USN-1115-1/
http://www.ubuntuupdates.org/packages/show/307975
http://www.vupen.com/english/advisories/2011/1032
https://exchange.xforce.ibmcloud.com/vulnerabilities/67255
https://launchpad.net/bugs/764397
https://launchpad.net/ubuntu/+source/language-selector/0.6.7