Vulnerability in Evan Dandrea Usb-Creator
CVE-2011-1828
usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.
EPSS: 0.004 (29.1th percentile) — read the EPSS interpretation.
Affected products
- Evan_dandrea Usb-creator — versions 0.1, 0.1.1, 0.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Patch)
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- security@ubuntu.com (x_refsource_CONFIRM, Patch)
- security@ubuntu.com (vdb-entry, x_refsource_XF)
- security@ubuntu.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)