CVE

Id
48641  
CVE No.
CVE-2011-0729  
Status
Candidate  
Description
dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.  
Phase
Assigned (20110201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
528907 48641 CVE-2011-0729 CONFIRM:http://www.ubuntuupdates.org/packages/show/307975  View
528908 48641 CVE-2011-0729 CONFIRM:https://launchpad.net/bugs/764397  View
528909 48641 CVE-2011-0729 CONFIRM:https://launchpad.net/ubuntu/+source/language-selector/0.6.7  View
528910 48641 CVE-2011-0729 UBUNTU:USN-1115-1  View
528911 48641 CVE-2011-0729 URL:http://www.ubuntu.com/usn/USN-1115-1/  View
528912 48641 CVE-2011-0729 BID:47502  View
528913 48641 CVE-2011-0729 URL:http://www.securityfocus.com/bid/47502  View
528914 48641 CVE-2011-0729 SECUNIA:44214  View
528915 48641 CVE-2011-0729 URL:http://secunia.com/advisories/44214  View
528916 48641 CVE-2011-0729 VUPEN:ADV-2011-1032  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33986 JVNDB-2011-004228 Adobe ColdFusion におけるクロスサイトスクリプティングの脆弱性 Adobe ColdFusion には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2011-0734 48641 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004228.html  View