Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
dbus_backend/ls-dbus-backend in the D-Bus backend in language-selector before 0.6.7 does not restrict access on the basis of a PolicyKit check result, which allows local users to modify the /etc/default/locale and /etc/environment files via a (1) SetSystemDefaultLangEnv or (2) SetSystemDefaultLanguageEnv call.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Ubuntu language-selector D-Bus dbus_backend/ls-dbus-backend权限许可和访问控制漏洞
Vulnerability Description
language-selector 0.67之前版本中的D-Bus后端的dbus_backend/ls-dbus-backend没有限制在PolicyKit检查结果基础上的访问权限。本地用户可以借助SetSystemDefaultLangEnv或SetSystemDefaultLanguageEnv调用修改the /etc/default/locale和/etc/environment文件，以root权限执行SHELL命令。
CVSS Information
N/A
Vulnerability Type
N/A