| Package | Affected versions | Patched versions |
|---|---|---|
| language-selector | = 0.0+baz20050531= 0.0+baz20050609= 0.0+baz20050614= 0.0+baz20050808= 0.0+baz20050811= 0.0+baz20050819= 0.0+baz20050819.2= 0.0+baz20050822= 0.0+baz20050823= 0.0+baz20050824= 0.0+baz20050912= 0.0+baz20050926= 0.0+baz20050927= 0.1= 0.1.1= 0.1.10= 0.1.11= 0.1.12= 0.1.13= 0.1.14= 0.1.15= 0.1.16= 0.1.17= 0.1.18= 0.1.19= 0.1.2= 0.1.20= 0.1.21= 0.1.22= 0.1.23= 0.1.24= 0.1.25= 0.1.26= 0.1.27= 0.1.28= 0.1.29= 0.1.3= 0.1.30= 0.1.4= 0.1.5= 0.1.6= 0.1.7= 0.1.8= 0.1.9= 0.2.0= 0.2.1= 0.2.10= 0.2.2= 0.2.3= 0.2.4= 0.2.5= 0.2.6= 0.2.7= 0.2.8= 0.2.9= 0.3.0= 0.3.1= 0.3.10= 0.3.11= 0.3.12= 0.3.13= 0.3.14= 0.3.15= 0.3.16= 0.3.17= 0.3.2= 0.3.20= 0.3.21= 0.3.3= 0.3.4= 0.3.5= 0.3.6= 0.3.7= 0.3.8= 0.3.9= 0.4.0= 0.4.1= 0.4.10= 0.4.11= 0.4.12= 0.4.13= 0.4.14= 0.4.15= 0.4.16= 0.4.17= 0.4.18= 0.4.19= 0.4.2= 0.4.2.1= 0.4.2.2= 0.4.2.3= 0.4.3= 0.4.4= 0.4.5= 0.4.6= 0.4.7= 0.4.8= 0.4.9= 0.5.0= 0.5.1= 0.5.2= 0.5.3= 0.5.4= 0.5.5= 0.5.6= 0.5.7= 0.6.0= 0.6.1= 0.6.2= 0.6.3= 0.6.4= 0.6.5≤ 0.6.6 |
dbus_backend/lsd.py in the D-Bus backend in language-selector before 0.6.7 does not validate the arguments to the (1) SetSystemDefaultLangEnv and (2) SetSystemDefaultLanguageEnv functions, which allows local users to gain privileges via shell metacharacters in a string argument, a different vulnerability than CVE-2011-0729.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free