Ubuntu language-selector Local Privilege Escalation Vulnerability

Bugtraq ID:	47502
Class:	Design Error
CVE:	CVE-2011-0729
Remote:	No
Local:	Yes
Published:	Apr 19 2011 12:00AM
Updated:	Apr 19 2011 12:00AM
Credit:	The vendor reported this issue
Vulnerable:	Ubuntu language-selector 0.6.6
Not Vulnerable:	Ubuntu language-selector 0.6.7

Ubuntu language-selector Local Privilege Escalation Vulnerability

The Ubuntu language-selector is prone to a local privilege-escalation vulnerability.

Successful exploits may allow unauthorized attackers to gain root access on the machine by injecting shell commands into the system-wide locale configuration file.

language-selector versions prior to 0.6.7 are vulnerable.

Ubuntu language-selector Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ubuntu language-selector Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.


Ubuntu language-selector 0.6.6

• Ubuntu language-selector_0.6.7.tar.gz
  https://launchpad.net/ubuntu/+archive/primary/+files/language-selector _0.6.7.tar.gz

Ubuntu language-selector Local Privilege Escalation Vulnerability

References:

• language-selector 0.6.7 Changelog (Ubuntu)
  
• Ubuntu language-selector Homepage (Ubuntu)