CVE-2011-1828: Low severity usb creator vulnerability
Published May 16, 2011
·Updated
usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.
Affected Software
46 affected components
Evan Dandrea Usb-creator=0.2.9
Evan Dandrea Usb-creator=0.1.9
Evan Dandrea Usb-creator=0.1.2
Evan Dandrea Usb-creator=0.2.27
Evan Dandrea Usb-creator=0.1.1
Evan Dandrea Usb-creator=0.1.16
Evan Dandrea Usb-creator=0.2.18
Evan Dandrea Usb-creator=0.2.1
Evan Dandrea Usb-creator=0.2.8
Evan Dandrea Usb-creator=0.2.4
Evan Dandrea Usb-creator=0.1.13
Evan Dandrea Usb-creator=0.2.13
Evan Dandrea Usb-creator=0.1.12
Evan Dandrea Usb-creator<=0.2.28
Evan Dandrea Usb-creator=0.2.14
Evan Dandrea Usb-creator=0.1
Evan Dandrea Usb-creator=0.1.8
Evan Dandrea Usb-creator=0.2.12
Evan Dandrea Usb-creator=0.1.14
Evan Dandrea Usb-creator=0.2.7
Evan Dandrea Usb-creator=0.2.16
Evan Dandrea Usb-creator=0.2.26
Evan Dandrea Usb-creator=0.2.6
Evan Dandrea Usb-creator=0.1.11
Evan Dandrea Usb-creator=0.2.25
Evan Dandrea Usb-creator=0.2.19
Evan Dandrea Usb-creator=0.2.23
Evan Dandrea Usb-creator=0.1.6
Evan Dandrea Usb-creator=0.2.11
Evan Dandrea Usb-creator=0.1.7
Evan Dandrea Usb-creator=0.2.2
Evan Dandrea Usb-creator=0.1.3
Evan Dandrea Usb-creator=0.2.15
Evan Dandrea Usb-creator=0.2.5
Evan Dandrea Usb-creator=0.2.22
Evan Dandrea Usb-creator=0.2.24
Evan Dandrea Usb-creator=0.1.15
Evan Dandrea Usb-creator=0.2.10
Evan Dandrea Usb-creator=0.1.5
Evan Dandrea Usb-creator=0.2.0
Evan Dandrea Usb-creator=0.2.20
Evan Dandrea Usb-creator=0.2.21
Evan Dandrea Usb-creator=0.2.3
Evan Dandrea Usb-creator=0.2.17
Evan Dandrea Usb-creator=0.1.10
Evan Dandrea Usb-creator=0.1.4
Remediation
Patch Available
Patch Available
Event History
May 16, 2011
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1828?
CVE-2011-1828 is classified as a medium severity vulnerability.
2
How do I fix CVE-2011-1828?
To fix CVE-2011-1828, update usb-creator to version 0.2.28.3 or later.
3
Who is affected by CVE-2011-1828?
CVE-2011-1828 affects users of usb-creator versions prior to 0.2.28.3.
4
What actions can be performed by exploiting CVE-2011-1828?
Exploiting CVE-2011-1828 allows local users to perform arbitrary unmount operations.
5
What component is affected in CVE-2011-1828?
CVE-2011-1828 affects the usb-creator-helper component in the usb-creator application.