CVE-2011-1842
NONE
Published May 3, 201115y ago · Modified Jun 16, 20262w ago
Published May 3, 2011 15y ago
Last Modified Jun 16, 2026 2w ago
Description
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.
Threat Intelligence
No active exploitation signals — not in CISA KEV and no EPSS score yet.
Exploit & Patch Status
Public Exploit Known
Patch Available
Weaknesses 1
CWE-20 Improper Input Validation Validation
Affected Products 113
| Vendor | Product | Version | Range |
|---|---|---|---|
| ubuntu | language-selector | * | ≤0.6.6 |
| ubuntu | language-selector | 0.0\+baz20050531 | any |
| ubuntu | language-selector | 0.0\+baz20050609 | any |
| ubuntu | language-selector | 0.0\+baz20050614 | any |
| ubuntu | language-selector | 0.0\+baz20050808 | any |
| ubuntu | language-selector | 0.0\+baz20050811 | any |
| ubuntu | language-selector | 0.0\+baz20050819 | any |
| ubuntu | language-selector | 0.0\+baz20050819.2 | any |
| ubuntu | language-selector | 0.0\+baz20050822 | any |
| ubuntu | language-selector | 0.0\+baz20050823 | any |
| ubuntu | language-selector | 0.0\+baz20050824 | any |
| ubuntu | language-selector | 0.0\+baz20050912 | any |
| ubuntu | language-selector | 0.0\+baz20050926 | any |
| ubuntu | language-selector | 0.0\+baz20050927 | any |
| ubuntu | language-selector | 0.1 | any |
| ubuntu | language-selector | 0.1.1 | any |
| ubuntu | language-selector | 0.1.2 | any |
| ubuntu | language-selector | 0.1.3 | any |
| ubuntu | language-selector | 0.1.4 | any |
| ubuntu | language-selector | 0.1.5 | any |
| ubuntu | language-selector | 0.1.6 | any |
| ubuntu | language-selector | 0.1.7 | any |
| ubuntu | language-selector | 0.1.8 | any |
| ubuntu | language-selector | 0.1.9 | any |
| ubuntu | language-selector | 0.1.10 | any |
| ubuntu | language-selector | 0.1.11 | any |
| ubuntu | language-selector | 0.1.12 | any |
| ubuntu | language-selector | 0.1.13 | any |
| ubuntu | language-selector | 0.1.14 | any |
| ubuntu | language-selector | 0.1.15 | any |
| ubuntu | language-selector | 0.1.16 | any |
| ubuntu | language-selector | 0.1.17 | any |
| ubuntu | language-selector | 0.1.18 | any |
| ubuntu | language-selector | 0.1.19 | any |
| ubuntu | language-selector | 0.1.20 | any |
| ubuntu | language-selector | 0.1.21 | any |
| ubuntu | language-selector | 0.1.22 | any |
| ubuntu | language-selector | 0.1.23 | any |
| ubuntu | language-selector | 0.1.24 | any |
| ubuntu | language-selector | 0.1.25 | any |
| ubuntu | language-selector | 0.1.26 | any |
| ubuntu | language-selector | 0.1.27 | any |
| ubuntu | language-selector | 0.1.28 | any |
| ubuntu | language-selector | 0.1.29 | any |
| ubuntu | language-selector | 0.1.30 | any |
| ubuntu | language-selector | 0.2.0 | any |
| ubuntu | language-selector | 0.2.1 | any |
| ubuntu | language-selector | 0.2.2 | any |
| ubuntu | language-selector | 0.2.3 | any |
| ubuntu | language-selector | 0.2.4 | any |
| ubuntu | language-selector | 0.2.5 | any |
| ubuntu | language-selector | 0.2.6 | any |
| ubuntu | language-selector | 0.2.7 | any |
| ubuntu | language-selector | 0.2.8 | any |
| ubuntu | language-selector | 0.2.9 | any |
| ubuntu | language-selector | 0.2.10 | any |
| ubuntu | language-selector | 0.3.0 | any |
| ubuntu | language-selector | 0.3.1 | any |
| ubuntu | language-selector | 0.3.2 | any |
| ubuntu | language-selector | 0.3.3 | any |
| ubuntu | language-selector | 0.3.4 | any |
| ubuntu | language-selector | 0.3.5 | any |
| ubuntu | language-selector | 0.3.6 | any |
| ubuntu | language-selector | 0.3.7 | any |
| ubuntu | language-selector | 0.3.8 | any |
| ubuntu | language-selector | 0.3.9 | any |
| ubuntu | language-selector | 0.3.10 | any |
| ubuntu | language-selector | 0.3.11 | any |
| ubuntu | language-selector | 0.3.12 | any |
| ubuntu | language-selector | 0.3.13 | any |
| ubuntu | language-selector | 0.3.14 | any |
| ubuntu | language-selector | 0.3.15 | any |
| ubuntu | language-selector | 0.3.16 | any |
| ubuntu | language-selector | 0.3.17 | any |
| ubuntu | language-selector | 0.3.20 | any |
| ubuntu | language-selector | 0.3.21 | any |
| ubuntu | language-selector | 0.4.0 | any |
| ubuntu | language-selector | 0.4.1 | any |
| ubuntu | language-selector | 0.4.2 | any |
| ubuntu | language-selector | 0.4.2.1 | any |
| ubuntu | language-selector | 0.4.2.2 | any |
| ubuntu | language-selector | 0.4.2.3 | any |
| ubuntu | language-selector | 0.4.3 | any |
| ubuntu | language-selector | 0.4.4 | any |
| ubuntu | language-selector | 0.4.5 | any |
| ubuntu | language-selector | 0.4.6 | any |
| ubuntu | language-selector | 0.4.7 | any |
| ubuntu | language-selector | 0.4.8 | any |
| ubuntu | language-selector | 0.4.9 | any |
| ubuntu | language-selector | 0.4.10 | any |
| ubuntu | language-selector | 0.4.11 | any |
| ubuntu | language-selector | 0.4.12 | any |
| ubuntu | language-selector | 0.4.13 | any |
| ubuntu | language-selector | 0.4.14 | any |
| ubuntu | language-selector | 0.4.15 | any |
| ubuntu | language-selector | 0.4.16 | any |
| ubuntu | language-selector | 0.4.17 | any |
| ubuntu | language-selector | 0.4.18 | any |
| ubuntu | language-selector | 0.4.19 | any |
| ubuntu | language-selector | 0.5.0 | any |
| ubuntu | language-selector | 0.5.1 | any |
| ubuntu | language-selector | 0.5.2 | any |
| ubuntu | language-selector | 0.5.3 | any |
| ubuntu | language-selector | 0.5.4 | any |
| ubuntu | language-selector | 0.5.5 | any |
| ubuntu | language-selector | 0.5.6 | any |
| ubuntu | language-selector | 0.5.7 | any |
| ubuntu | language-selector | 0.6.0 | any |
| ubuntu | language-selector | 0.6.1 | any |
| ubuntu | language-selector | 0.6.2 | any |
| ubuntu | language-selector | 0.6.3 | any |
| ubuntu | language-selector | 0.6.4 | any |
| ubuntu | language-selector | 0.6.5 | any |
References 8
- secunia.com http://secunia.com/advisories/44214
- securityfocus.com http://www.securityfocus.com/bid/47502
- ubuntu.com http://www.ubuntu.com/usn/USN-1115-1/
- ubuntuupdates.org http://www.ubuntuupdates.org/packages/show/307975
- vupen.com http://www.vupen.com/english/advisories/2011/1032
- exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/67255
- launchpad.net https://launchpad.net/bugs/764397
- launchpad.net https://launchpad.net/ubuntu/+source/language-selector/0.6.7
Remediation
- securityfocus.com http://www.securityfocus.com/bid/47502
- launchpad.net https://launchpad.net/bugs/764397