NVD

Id
8722  
Name
CVE-2011-1842  
Description
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-05-02  
Modified Date
2011-09-06  
Seq
2011-1842  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
50320 8722 CVE-2011-1842 47502  View
50321 8722 CVE-2011-1842 USN-1115-1  View
50322 8722 CVE-2011-1842 http://www.ubuntuupdates.org/packages/show/307975  View
50323 8722 CVE-2011-1842 ADV-2011-1032  View
50324 8722 CVE-2011-1842 languageselector-dbus-priv-esc(67255)  View
50325 8722 CVE-2011-1842 https://launchpad.net/bugs/764397  View
50326 8722 CVE-2011-1842 https://launchpad.net/ubuntu/+source/language-selector/0.6.7  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34323 JVNDB-2011-004565 language-selector の D-Bus バックエンドにおける権限を取得される脆弱性 language-selector の D-Bus バックエンドの dbus_backend/lsd.py は、(1) SetSystemDefaultLangEnv および (2) SetSystemDefaultLanguageEnv 関数への引数を検証しないため、権限を取得される脆弱性が存在します。 CVE-2011-1842 49749 CVE-2011-1842 8722 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004565.html 2011-05-02 2012-03-27 View