Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-1828

usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.

Published

2011-05-16T18:55:01.057

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 2.1 (LOW)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

3.9

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application evan_dandrea usb-creator ≤ 0.2.28 Yes
Application evan_dandrea usb-creator 0.1 Yes
Application evan_dandrea usb-creator 0.1.1 Yes
Application evan_dandrea usb-creator 0.1.2 Yes
Application evan_dandrea usb-creator 0.1.3 Yes
Application evan_dandrea usb-creator 0.1.4 Yes
Application evan_dandrea usb-creator 0.1.5 Yes
Application evan_dandrea usb-creator 0.1.6 Yes
Application evan_dandrea usb-creator 0.1.7 Yes
Application evan_dandrea usb-creator 0.1.8 Yes
Application evan_dandrea usb-creator 0.1.9 Yes
Application evan_dandrea usb-creator 0.1.10 Yes
Application evan_dandrea usb-creator 0.1.11 Yes
Application evan_dandrea usb-creator 0.1.12 Yes
Application evan_dandrea usb-creator 0.1.13 Yes
Application evan_dandrea usb-creator 0.1.14 Yes
Application evan_dandrea usb-creator 0.1.15 Yes
Application evan_dandrea usb-creator 0.1.16 Yes
Application evan_dandrea usb-creator 0.2.0 Yes
Application evan_dandrea usb-creator 0.2.1 Yes
Application evan_dandrea usb-creator 0.2.2 Yes
Application evan_dandrea usb-creator 0.2.3 Yes
Application evan_dandrea usb-creator 0.2.4 Yes
Application evan_dandrea usb-creator 0.2.5 Yes
Application evan_dandrea usb-creator 0.2.6 Yes
Application evan_dandrea usb-creator 0.2.7 Yes
Application evan_dandrea usb-creator 0.2.8 Yes
Application evan_dandrea usb-creator 0.2.9 Yes
Application evan_dandrea usb-creator 0.2.10 Yes
Application evan_dandrea usb-creator 0.2.11 Yes
Application evan_dandrea usb-creator 0.2.12 Yes
Application evan_dandrea usb-creator 0.2.13 Yes
Application evan_dandrea usb-creator 0.2.14 Yes
Application evan_dandrea usb-creator 0.2.15 Yes
Application evan_dandrea usb-creator 0.2.16 Yes
Application evan_dandrea usb-creator 0.2.17 Yes
Application evan_dandrea usb-creator 0.2.18 Yes
Application evan_dandrea usb-creator 0.2.19 Yes
Application evan_dandrea usb-creator 0.2.20 Yes
Application evan_dandrea usb-creator 0.2.21 Yes
Application evan_dandrea usb-creator 0.2.22 Yes
Application evan_dandrea usb-creator 0.2.23 Yes
Application evan_dandrea usb-creator 0.2.24 Yes
Application evan_dandrea usb-creator 0.2.25 Yes
Application evan_dandrea usb-creator 0.2.26 Yes
Application evan_dandrea usb-creator 0.2.27 Yes
References