Ubuntu Security Notice (C) 2011-2013 Canonical, Inc. / NASL script (C) 2011-2013 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Romain Perier discovered that the language-selector D-Bus backend did
not correctly check for Policy Kit authorizations. A local attacker
could exploit this to inject shell commands into the system-wide
locale configuration file, leading to root privilege escalation.
Update the affected language-selector-common package.
Risk factor :
High / CVSS Base Score : 7.2