CVE-2011-0729

Severity CVSS v4.0:

Pending analysis

Type:

CWE-264 Permissions, Privileges, and Access Control

Publication date:

29/04/2011

Last modified:

11/04/2025

Description

dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.

Impact

Vector 2.0

AV:L/AC:L/Au:N/C:C/I:C/A:C CVSS v2.0 Severity and Metrics:

Base Score: 7.20 HIGH
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Complete
Integrity (I): Complete
Availability (A): Complete

Base Score 2.0

7.20

Severity 2.0

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:ubuntu:language-selector::::::::		0.6.6 (including)
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050531:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050609:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050614:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050808:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050811:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050819:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050819.2:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050822:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050823:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050824:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050912:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050926:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050927:::::::*
cpe:2.3:a:ubuntu:language-selector:0.1:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:ubuntu:language-selector::::::::		0.6.6 (including)
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050531:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050609:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050614:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050808:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050811:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050819:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050819.2:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050822:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050823:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050824:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050912:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050926:::::::*
cpe:2.3:a:ubuntu:language-selector:0.0\+baz20050927:::::::*
cpe:2.3:a:ubuntu:language-selector:0.1:::::::*

CVE-2011-0729

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools