CVEvulnerability

CVE-2011-1842

7.2 HIGH Published 2011-05-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.

Affected configurations

• ubuntu language-selector (<= 0.6.6) • ubuntu language-selector 0.0\+baz20050531 • ubuntu language-selector 0.0\+baz20050609 • ubuntu language-selector 0.0\+baz20050614 • ubuntu language-selector 0.0\+baz20050808 • ubuntu language-selector 0.0\+baz20050811 • ubuntu language-selector 0.0\+baz20050819 • ubuntu language-selector 0.0\+baz20050819.2 • ubuntu language-selector 0.0\+baz20050822 • ubuntu language-selector 0.0\+baz20050823 • ubuntu language-selector 0.0\+baz20050824 • ubuntu language-selector 0.0\+baz20050912 • ubuntu language-selector 0.0\+baz20050926 • ubuntu language-selector 0.0\+baz20050927 • ubuntu language-selector 0.1 • ubuntu language-selector 0.1.1 • ubuntu language-selector 0.1.2 • ubuntu language-selector 0.1.3 • ubuntu language-selector 0.1.4 • ubuntu language-selector 0.1.5 • ubuntu language-selector 0.1.6 • ubuntu language-selector 0.1.7 • ubuntu language-selector 0.1.8 • ubuntu language-selector 0.1.9 • ubuntu language-selector 0.1.10 • ubuntu language-selector 0.1.11 • ubuntu language-selector 0.1.12 • ubuntu language-selector 0.1.13 • ubuntu language-selector 0.1.14 • ubuntu language-selector 0.1.15 • ubuntu language-selector 0.1.16 • ubuntu language-selector 0.1.17 • ubuntu language-selector 0.1.18 • ubuntu language-selector 0.1.19 • ubuntu language-selector 0.1.20 • ubuntu language-selector 0.1.21 • ubuntu language-selector 0.1.22 • ubuntu language-selector 0.1.23 • ubuntu language-selector 0.1.24 • ubuntu language-selector 0.1.25 • ubuntu language-selector 0.1.26 • ubuntu language-selector 0.1.27 • ubuntu language-selector 0.1.28 • ubuntu language-selector 0.1.29 • ubuntu language-selector 0.1.30 • ubuntu language-selector 0.2.0 • ubuntu language-selector 0.2.1 • ubuntu language-selector 0.2.2 • ubuntu language-selector 0.2.3 • ubuntu language-selector 0.2.4 • ubuntu language-selector 0.2.5 • ubuntu language-selector 0.2.6 • ubuntu language-selector 0.2.7 • ubuntu language-selector 0.2.8 • ubuntu language-selector 0.2.9 • ubuntu language-selector 0.2.10 • ubuntu language-selector 0.3.0 • ubuntu language-selector 0.3.1 • ubuntu language-selector 0.3.2 • ubuntu language-selector 0.3.3 … and 53 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References