Description
usb-creator-helper in usb-creator before 0.2.28.3 does not enforce intended PolicyKit restrictions, which allows local users to perform arbitrary unmount operations via the UnmountFile method in a dbus-send command.
References
- USN-1127-1 vendor-advisory
- 47679 vdb-entry
- ADV-2011-1143 vdb-entry
- https://launchpad.net/bugs/771553
- usbcreator-unspecified-sec-bypass(67241) vdb-entry
- 44413 third-party-advisory