Lucene search

K
nvd[email protected]NVD:CVE-2011-0729
HistoryApr 29, 2011 - 10:55 p.m.

CVE-2011-0729

2011-04-2922:55:00
CWE-264
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.

Affected configurations

NVD
Node
ubuntulanguage-selectorRange0.6.6
OR
ubuntulanguage-selectorMatch0.0\+baz20050531
OR
ubuntulanguage-selectorMatch0.0\+baz20050609
OR
ubuntulanguage-selectorMatch0.0\+baz20050614
OR
ubuntulanguage-selectorMatch0.0\+baz20050808
OR
ubuntulanguage-selectorMatch0.0\+baz20050811
OR
ubuntulanguage-selectorMatch0.0\+baz20050819
OR
ubuntulanguage-selectorMatch0.0\+baz20050819.2
OR
ubuntulanguage-selectorMatch0.0\+baz20050822
OR
ubuntulanguage-selectorMatch0.0\+baz20050823
OR
ubuntulanguage-selectorMatch0.0\+baz20050824
OR
ubuntulanguage-selectorMatch0.0\+baz20050912
OR
ubuntulanguage-selectorMatch0.0\+baz20050926
OR
ubuntulanguage-selectorMatch0.0\+baz20050927
OR
ubuntulanguage-selectorMatch0.1
OR
ubuntulanguage-selectorMatch0.1.1
OR
ubuntulanguage-selectorMatch0.1.2
OR
ubuntulanguage-selectorMatch0.1.3
OR
ubuntulanguage-selectorMatch0.1.4
OR
ubuntulanguage-selectorMatch0.1.5
OR
ubuntulanguage-selectorMatch0.1.6
OR
ubuntulanguage-selectorMatch0.1.7
OR
ubuntulanguage-selectorMatch0.1.8
OR
ubuntulanguage-selectorMatch0.1.9
OR
ubuntulanguage-selectorMatch0.1.10
OR
ubuntulanguage-selectorMatch0.1.11
OR
ubuntulanguage-selectorMatch0.1.12
OR
ubuntulanguage-selectorMatch0.1.13
OR
ubuntulanguage-selectorMatch0.1.14
OR
ubuntulanguage-selectorMatch0.1.15
OR
ubuntulanguage-selectorMatch0.1.16
OR
ubuntulanguage-selectorMatch0.1.17
OR
ubuntulanguage-selectorMatch0.1.18
OR
ubuntulanguage-selectorMatch0.1.19
OR
ubuntulanguage-selectorMatch0.1.20
OR
ubuntulanguage-selectorMatch0.1.21
OR
ubuntulanguage-selectorMatch0.1.22
OR
ubuntulanguage-selectorMatch0.1.23
OR
ubuntulanguage-selectorMatch0.1.24
OR
ubuntulanguage-selectorMatch0.1.25
OR
ubuntulanguage-selectorMatch0.1.26
OR
ubuntulanguage-selectorMatch0.1.27
OR
ubuntulanguage-selectorMatch0.1.28
OR
ubuntulanguage-selectorMatch0.1.29
OR
ubuntulanguage-selectorMatch0.1.30
OR
ubuntulanguage-selectorMatch0.2.0
OR
ubuntulanguage-selectorMatch0.2.1
OR
ubuntulanguage-selectorMatch0.2.2
OR
ubuntulanguage-selectorMatch0.2.3
OR
ubuntulanguage-selectorMatch0.2.4
OR
ubuntulanguage-selectorMatch0.2.5
OR
ubuntulanguage-selectorMatch0.2.6
OR
ubuntulanguage-selectorMatch0.2.7
OR
ubuntulanguage-selectorMatch0.2.8
OR
ubuntulanguage-selectorMatch0.2.9
OR
ubuntulanguage-selectorMatch0.2.10
OR
ubuntulanguage-selectorMatch0.3.0
OR
ubuntulanguage-selectorMatch0.3.1
OR
ubuntulanguage-selectorMatch0.3.2
OR
ubuntulanguage-selectorMatch0.3.3
OR
ubuntulanguage-selectorMatch0.3.4
OR
ubuntulanguage-selectorMatch0.3.5
OR
ubuntulanguage-selectorMatch0.3.6
OR
ubuntulanguage-selectorMatch0.3.7
OR
ubuntulanguage-selectorMatch0.3.8
OR
ubuntulanguage-selectorMatch0.3.9
OR
ubuntulanguage-selectorMatch0.3.10
OR
ubuntulanguage-selectorMatch0.3.11
OR
ubuntulanguage-selectorMatch0.3.12
OR
ubuntulanguage-selectorMatch0.3.13
OR
ubuntulanguage-selectorMatch0.3.14
OR
ubuntulanguage-selectorMatch0.3.15
OR
ubuntulanguage-selectorMatch0.3.16
OR
ubuntulanguage-selectorMatch0.3.17
OR
ubuntulanguage-selectorMatch0.3.20
OR
ubuntulanguage-selectorMatch0.3.21
OR
ubuntulanguage-selectorMatch0.4.0
OR
ubuntulanguage-selectorMatch0.4.1
OR
ubuntulanguage-selectorMatch0.4.2
OR
ubuntulanguage-selectorMatch0.4.2.1
OR
ubuntulanguage-selectorMatch0.4.2.2
OR
ubuntulanguage-selectorMatch0.4.2.3
OR
ubuntulanguage-selectorMatch0.4.3
OR
ubuntulanguage-selectorMatch0.4.4
OR
ubuntulanguage-selectorMatch0.4.5
OR
ubuntulanguage-selectorMatch0.4.6
OR
ubuntulanguage-selectorMatch0.4.7
OR
ubuntulanguage-selectorMatch0.4.8
OR
ubuntulanguage-selectorMatch0.4.9
OR
ubuntulanguage-selectorMatch0.4.10
OR
ubuntulanguage-selectorMatch0.4.11
OR
ubuntulanguage-selectorMatch0.4.12
OR
ubuntulanguage-selectorMatch0.4.13
OR
ubuntulanguage-selectorMatch0.4.14
OR
ubuntulanguage-selectorMatch0.4.15
OR
ubuntulanguage-selectorMatch0.4.16
OR
ubuntulanguage-selectorMatch0.4.17
OR
ubuntulanguage-selectorMatch0.4.18
OR
ubuntulanguage-selectorMatch0.4.19
OR
ubuntulanguage-selectorMatch0.5.0
OR
ubuntulanguage-selectorMatch0.5.1
OR
ubuntulanguage-selectorMatch0.5.2
OR
ubuntulanguage-selectorMatch0.5.3
OR
ubuntulanguage-selectorMatch0.5.4
OR
ubuntulanguage-selectorMatch0.5.5
OR
ubuntulanguage-selectorMatch0.5.6
OR
ubuntulanguage-selectorMatch0.5.7
OR
ubuntulanguage-selectorMatch0.6.0
OR
ubuntulanguage-selectorMatch0.6.1
OR
ubuntulanguage-selectorMatch0.6.2
OR
ubuntulanguage-selectorMatch0.6.3
OR
ubuntulanguage-selectorMatch0.6.4
OR
ubuntulanguage-selectorMatch0.6.5

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%