CVEvulnerability
CVE-2011-1842
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.
Affected configurations
• ubuntu language-selector (<= 0.6.6)
• ubuntu language-selector 0.0\+baz20050531
• ubuntu language-selector 0.0\+baz20050609
• ubuntu language-selector 0.0\+baz20050614
• ubuntu language-selector 0.0\+baz20050808
• ubuntu language-selector 0.0\+baz20050811
• ubuntu language-selector 0.0\+baz20050819
• ubuntu language-selector 0.0\+baz20050819.2
• ubuntu language-selector 0.0\+baz20050822
• ubuntu language-selector 0.0\+baz20050823
• ubuntu language-selector 0.0\+baz20050824
• ubuntu language-selector 0.0\+baz20050912
• ubuntu language-selector 0.0\+baz20050926
• ubuntu language-selector 0.0\+baz20050927
• ubuntu language-selector 0.1
• ubuntu language-selector 0.1.1
• ubuntu language-selector 0.1.2
• ubuntu language-selector 0.1.3
• ubuntu language-selector 0.1.4
• ubuntu language-selector 0.1.5
• ubuntu language-selector 0.1.6
• ubuntu language-selector 0.1.7
• ubuntu language-selector 0.1.8
• ubuntu language-selector 0.1.9
• ubuntu language-selector 0.1.10
• ubuntu language-selector 0.1.11
• ubuntu language-selector 0.1.12
• ubuntu language-selector 0.1.13
• ubuntu language-selector 0.1.14
• ubuntu language-selector 0.1.15
• ubuntu language-selector 0.1.16
• ubuntu language-selector 0.1.17
• ubuntu language-selector 0.1.18
• ubuntu language-selector 0.1.19
• ubuntu language-selector 0.1.20
• ubuntu language-selector 0.1.21
• ubuntu language-selector 0.1.22
• ubuntu language-selector 0.1.23
• ubuntu language-selector 0.1.24
• ubuntu language-selector 0.1.25
• ubuntu language-selector 0.1.26
• ubuntu language-selector 0.1.27
• ubuntu language-selector 0.1.28
• ubuntu language-selector 0.1.29
• ubuntu language-selector 0.1.30
• ubuntu language-selector 0.2.0
• ubuntu language-selector 0.2.1
• ubuntu language-selector 0.2.2
• ubuntu language-selector 0.2.3
• ubuntu language-selector 0.2.4
• ubuntu language-selector 0.2.5
• ubuntu language-selector 0.2.6
• ubuntu language-selector 0.2.7
• ubuntu language-selector 0.2.8
• ubuntu language-selector 0.2.9
• ubuntu language-selector 0.2.10
• ubuntu language-selector 0.3.0
• ubuntu language-selector 0.3.1
• ubuntu language-selector 0.3.2
• ubuntu language-selector 0.3.3
… and 53 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/44214 Vendor Advisory
- http://www.securityfocus.com/bid/47502 Patch
- http://www.ubuntu.com/usn/USN-1115-1/ www.ubuntu.com
- http://www.ubuntuupdates.org/packages/show/307975 www.ubuntuupdates.org
- http://www.vupen.com/english/advisories/2011/1032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67255 exchange.xforce.ibmcloud.com
- https://launchpad.net/bugs/764397 Exploit, Patch
- https://launchpad.net/ubuntu/+source/language-selector/0.6.7 launchpad.net
- http://secunia.com/advisories/44214 Vendor Advisory
- http://www.securityfocus.com/bid/47502 Patch
- http://www.ubuntu.com/usn/USN-1115-1/ www.ubuntu.com
- http://www.ubuntuupdates.org/packages/show/307975 www.ubuntuupdates.org
- http://www.vupen.com/english/advisories/2011/1032 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67255 exchange.xforce.ibmcloud.com
- https://launchpad.net/bugs/764397 Exploit, Patch
- https://launchpad.net/ubuntu/+source/language-selector/0.6.7 launchpad.net