CVE-2018-14036

🗓️ 13 Jul 2018 12:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 186 Views

Directory Traversal in AccountsService before 0.6.5

Reporter	Title	Published	Views	Family All 45
FreeBSD	AccountsService -- Insufficient path check in user_change_icon_file_authorized_cb()	13 Jul 201800:00	–	freebsd
Cent OS	PackageKit, accountsservice, adwaita, appstream, at, atk, baobab, bolt, brasero, cairo, cheese, clutter, compat, control, dconf, devhelp, ekiga, empathy, eog, evince, evolution, file, flatpak, folks, fontconfig, freetype, fribidi, fwupd, fwupdate, gcr, gdk, gdm, gedit, geoclue2, geocode, gjs, glade, glib, glib2, glibmm24, gnome, gnote, gobject, gom, google, grilo, gsettings, gspell, gssdp, gstreamer1, gtk, gtk3, gtksourceview3, gucharmap, gupnp, gvfs, harfbuzz, json, libappstream, libchamplain, libcroco, libgdata, libgee, libgepub, libgexiv2, libgnomekbd, libgovirt, libgtop2, libgweather, libgxps, libical, libmediaart, libosinfo, libpeas, librsvg2, libsecret, libsoup, libwayland, libwnck3, mozjs52, mutter, nautilus, openchange, osinfo, pango, poppler, python2, rest, rhythmbox, seahorse, shotwell, sushi, totem, upower, vala, valadoc, vino, vte, vte291, wayland, webkitgtk4, xdg, yelp, zenity security update	15 Nov 201818:43	–	centos
CNVD	AccountsService Path Traversal Vulnerability	17 Jul 201800:00	–	cnvd
Cvelist	CVE-2018-14036	13 Jul 201812:00	–	cvelist
Debian CVE	CVE-2018-14036	13 Jul 201812:00	–	debiancve
Tenable Nessus	EulerOS 2.0 SP2 : accountsservice (EulerOS-SA-2019-2443)	4 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP3 : accountsservice (EulerOS-SA-2019-2555)	19 Dec 201900:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP5 : accountsservice (EulerOS-SA-2019-2709)	23 Dec 201900:00	–	nessus
Tenable Nessus	FreeBSD : AccountService -- Insufficient path check in user_change_icon_file_authorized_cb() (75aae50b-9e3c-11eb-9bc3-8c164582fbac)	16 Apr 202100:00	–	nessus
Tenable Nessus	openSUSE Security Update : accountsservice (openSUSE-2018-1380)	10 Nov 201800:00	–	nessus

NVD

Node

freedesktop accountsserviceRange<0.6.50

Source	Link
securityfocus	www.securityfocus.com/bid/104757
cgit	www.cgit.freedesktop.org/accountsservice/commit/
bugzilla	www.bugzilla.suse.com/show_bug.cgi
bugs	www.bugs.freedesktop.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2018/07/02/2

21 Nov 2024 03:48Current

4.9Medium risk

Vulners AI Score4.9

CVSS 24

CVSS 36.5

EPSS0.01239

cve-2018-14036 directory traversal accountsservice insufficient path check user change icon file authorized user.c