CVE-2011-1828

Name of the Vulnerable Software and Affected Versions usb-creator versions prior to 0.2.28.3

Description The issue allows local users to perform arbitrary unmount operations. This is due to the failure of usb-creator-helper to enforce intended PolicyKit restrictions. The UnmountFile method can be exploited via a dbus-send command.

Recommendations For versions prior to 0.2.28.3, update to version 0.2.28.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the UnmountFile method to minimize the risk of exploitation.