CVE-2011-0729: High severity Ubuntu Language-selector vulnerability

Published Apr 29, 2011
·
Updated

dbusbackend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.

Affected Software

113 affected components
Ubuntu Language-selector<=0.6.6
Ubuntu Language-selector=0.0\+baz20050531
Ubuntu Language-selector=0.0\+baz20050609
Ubuntu Language-selector=0.0\+baz20050614
Ubuntu Language-selector=0.0\+baz20050808
Ubuntu Language-selector=0.0\+baz20050811
Ubuntu Language-selector=0.0\+baz20050819
Ubuntu Language-selector=0.0\+baz20050819.2
Ubuntu Language-selector=0.0\+baz20050822
Ubuntu Language-selector=0.0\+baz20050823
Ubuntu Language-selector=0.0\+baz20050824
Ubuntu Language-selector=0.0\+baz20050912
Ubuntu Language-selector=0.0\+baz20050926
Ubuntu Language-selector=0.0\+baz20050927
Ubuntu Language-selector=0.1
Ubuntu Language-selector=0.1.1
Ubuntu Language-selector=0.1.2
Ubuntu Language-selector=0.1.3
Ubuntu Language-selector=0.1.4
Ubuntu Language-selector=0.1.5
Ubuntu Language-selector=0.1.6
Ubuntu Language-selector=0.1.7
Ubuntu Language-selector=0.1.8
Ubuntu Language-selector=0.1.9
Ubuntu Language-selector=0.1.10
Ubuntu Language-selector=0.1.11
Ubuntu Language-selector=0.1.12
Ubuntu Language-selector=0.1.13
Ubuntu Language-selector=0.1.14
Ubuntu Language-selector=0.1.15
Ubuntu Language-selector=0.1.16
Ubuntu Language-selector=0.1.17
Ubuntu Language-selector=0.1.18
Ubuntu Language-selector=0.1.19
Ubuntu Language-selector=0.1.20
Ubuntu Language-selector=0.1.21
Ubuntu Language-selector=0.1.22
Ubuntu Language-selector=0.1.23
Ubuntu Language-selector=0.1.24
Ubuntu Language-selector=0.1.25
Ubuntu Language-selector=0.1.26
Ubuntu Language-selector=0.1.27
Ubuntu Language-selector=0.1.28
Ubuntu Language-selector=0.1.29
Ubuntu Language-selector=0.1.30
Ubuntu Language-selector=0.2.0
Ubuntu Language-selector=0.2.1
Ubuntu Language-selector=0.2.2
Ubuntu Language-selector=0.2.3
Ubuntu Language-selector=0.2.4
Ubuntu Language-selector=0.2.5
Ubuntu Language-selector=0.2.6
Ubuntu Language-selector=0.2.7
Ubuntu Language-selector=0.2.8
Ubuntu Language-selector=0.2.9
Ubuntu Language-selector=0.2.10
Ubuntu Language-selector=0.3.0
Ubuntu Language-selector=0.3.1
Ubuntu Language-selector=0.3.2
Ubuntu Language-selector=0.3.3
Ubuntu Language-selector=0.3.4
Ubuntu Language-selector=0.3.5
Ubuntu Language-selector=0.3.6
Ubuntu Language-selector=0.3.7
Ubuntu Language-selector=0.3.8
Ubuntu Language-selector=0.3.9
Ubuntu Language-selector=0.3.10
Ubuntu Language-selector=0.3.11
Ubuntu Language-selector=0.3.12
Ubuntu Language-selector=0.3.13
Ubuntu Language-selector=0.3.14
Ubuntu Language-selector=0.3.15
Ubuntu Language-selector=0.3.16
Ubuntu Language-selector=0.3.17
Ubuntu Language-selector=0.3.20
Ubuntu Language-selector=0.3.21
Ubuntu Language-selector=0.4.0
Ubuntu Language-selector=0.4.1
Ubuntu Language-selector=0.4.2
Ubuntu Language-selector=0.4.2.1
Ubuntu Language-selector=0.4.2.2
Ubuntu Language-selector=0.4.2.3
Ubuntu Language-selector=0.4.3
Ubuntu Language-selector=0.4.4
Ubuntu Language-selector=0.4.5
Ubuntu Language-selector=0.4.6
Ubuntu Language-selector=0.4.7
Ubuntu Language-selector=0.4.8
Ubuntu Language-selector=0.4.9
Ubuntu Language-selector=0.4.10
Ubuntu Language-selector=0.4.11
Ubuntu Language-selector=0.4.12
Ubuntu Language-selector=0.4.13
Ubuntu Language-selector=0.4.14
Ubuntu Language-selector=0.4.15
Ubuntu Language-selector=0.4.16
Ubuntu Language-selector=0.4.17
Ubuntu Language-selector=0.4.18
Ubuntu Language-selector=0.4.19
Ubuntu Language-selector=0.5.0
Ubuntu Language-selector=0.5.1
Ubuntu Language-selector=0.5.2
Ubuntu Language-selector=0.5.3
Ubuntu Language-selector=0.5.4
Ubuntu Language-selector=0.5.5
Ubuntu Language-selector=0.5.6
Ubuntu Language-selector=0.5.7
Ubuntu Language-selector=0.6.0
Ubuntu Language-selector=0.6.1
Ubuntu Language-selector=0.6.2
Ubuntu Language-selector=0.6.3
Ubuntu Language-selector=0.6.4
Ubuntu Language-selector=0.6.5

Remediation

Patch Available

http://www.securityfocus.com/bid/47502

Patch Available

https://launchpad.net/ubuntu/+source/language-selector/0.6.7

Event History

Apr 29, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2011-0729?

CVE-2011-0729 has a moderate severity level that could allow local users to modify system locale settings.

2

How do I fix CVE-2011-0729?

To fix CVE-2011-0729, upgrade the Ubuntu language-selector package to version 0.6.7 or later.

3

What systems are affected by CVE-2011-0729?

CVE-2011-0729 affects various versions of the Ubuntu language-selector prior to 0.6.7.

4

Can CVE-2011-0729 be exploited remotely?

CVE-2011-0729 cannot be exploited remotely as it requires local user access.

5

What is the impact of exploiting CVE-2011-0729?

Exploiting CVE-2011-0729 allows local users to change critical system locale settings, potentially affecting system behavior.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203