CVEvulnerability
CVE-2011-1828
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-05-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.
Affected configurations
• evan dandrea usb-creator (<= 0.2.28)
• evan dandrea usb-creator 0.1
• evan dandrea usb-creator 0.1.1
• evan dandrea usb-creator 0.1.2
• evan dandrea usb-creator 0.1.3
• evan dandrea usb-creator 0.1.4
• evan dandrea usb-creator 0.1.5
• evan dandrea usb-creator 0.1.6
• evan dandrea usb-creator 0.1.7
• evan dandrea usb-creator 0.1.8
• evan dandrea usb-creator 0.1.9
• evan dandrea usb-creator 0.1.10
• evan dandrea usb-creator 0.1.11
• evan dandrea usb-creator 0.1.12
• evan dandrea usb-creator 0.1.13
• evan dandrea usb-creator 0.1.14
• evan dandrea usb-creator 0.1.15
• evan dandrea usb-creator 0.1.16
• evan dandrea usb-creator 0.2.0
• evan dandrea usb-creator 0.2.1
• evan dandrea usb-creator 0.2.2
• evan dandrea usb-creator 0.2.3
• evan dandrea usb-creator 0.2.4
• evan dandrea usb-creator 0.2.5
• evan dandrea usb-creator 0.2.6
• evan dandrea usb-creator 0.2.7
• evan dandrea usb-creator 0.2.8
• evan dandrea usb-creator 0.2.9
• evan dandrea usb-creator 0.2.10
• evan dandrea usb-creator 0.2.11
• evan dandrea usb-creator 0.2.12
• evan dandrea usb-creator 0.2.13
• evan dandrea usb-creator 0.2.14
• evan dandrea usb-creator 0.2.15
• evan dandrea usb-creator 0.2.16
• evan dandrea usb-creator 0.2.17
• evan dandrea usb-creator 0.2.18
• evan dandrea usb-creator 0.2.19
• evan dandrea usb-creator 0.2.20
• evan dandrea usb-creator 0.2.21
• evan dandrea usb-creator 0.2.22
• evan dandrea usb-creator 0.2.23
• evan dandrea usb-creator 0.2.24
• evan dandrea usb-creator 0.2.25
• evan dandrea usb-creator 0.2.26
• evan dandrea usb-creator 0.2.27
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/44413 Vendor Advisory
- http://www.securityfocus.com/bid/47679 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-1127-1/ Patch
- http://www.vupen.com/english/advisories/2011/1143 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67241 exchange.xforce.ibmcloud.com
- https://launchpad.net/bugs/771553 Patch
- http://secunia.com/advisories/44413 Vendor Advisory
- http://www.securityfocus.com/bid/47679 www.securityfocus.com
- http://www.ubuntu.com/usn/usn-1127-1/ Patch
- http://www.vupen.com/english/advisories/2011/1143 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67241 exchange.xforce.ibmcloud.com
- https://launchpad.net/bugs/771553 Patch