CVE:CVE-2011-1828
CNNVD:CNNVD-201105-055
USB Creator 0.2.28.3之前版本中的usb-creator-helper没有强制执行预设的PolicyKit限制条件。本地用户可以借助dbus-send命令中的UnmountFile方法执行任意卸载操作。
solution:Upgrade evan_dandrea usb-creator to a higher version than 0.2.28,0.1,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.1.11,0.1.12,0.1.13,0.1.14,0.1.15,0.1.16,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.15,0.2.16,0.2.17,0.2.18,0.2.19,0.2.20,0.2.21,0.2.22,0.2.23,0.2.24,0.2.25,0.2.26,0.2.27,and avoid the version (,0.2.28],0.1,0.1.1,0.1.2,0.1.3,0.1.4,0.1.5,0.1.6,0.1.7,0.1.8,0.1.9,0.1.10,0.1.11,0.1.12,0.1.13,0.1.14,0.1.15,0.1.16,0.2.0,0.2.1,0.2.2,0.2.3,0.2.4,0.2.5,0.2.6,0.2.7,0.2.8,0.2.9,0.2.10,0.2.11,0.2.12,0.2.13,0.2.14,0.2.15,0.2.16,0.2.17,0.2.18,0.2.19,0.2.20,0.2.21,0.2.22,0.2.23,0.2.24,0.2.25,0.2.26,0.2.27