CVE-2012-2737

The userchangeiconfileauthorizedcb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition...

CVE-2012-2737

AccountsService

CVE-2012-2737

The userchangeiconfileauthorizedcb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition...

Ubuntu AccountsService privilege escalation

Invalid files caching...

[USN-1485-1] AccountsService vulnerability

========================================================================== Ubuntu Security Notice USN-1485-1 June 28, 2012 accountsservice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Ubuntu Update for accountsservice USN-1485-1

Ubuntu Update for Linux kernel vulnerabilities USN-1485-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14851.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for accountsservice USN-1485-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Fedora 17 : accountsservice-0.6.21-2.fc17 (2012-10120)

This updates accountsservice to correct a local file disclosure security flaw. CVE-2012-2737 This update also corrects and issue where spurios users show up in the login screen user list. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora...

Ubuntu: Security Advisory (USN-1485-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 17 Update: accountsservice-0.6.21-2.fc17

The accountsservice project provides a set of D-Bus interfaces for querying and manipulating user account information and an implementation of these interfaces, based on the useradd, usermod and userdel commands...

Ubuntu 11.10 / 12.04 LTS : accountsservice vulnerability (USN-1485-1)

Florian Weimer discovered that AccountsService incorrectly handled privileges when copying certain files to the system cache directory. A local attacker could exploit this issue to read arbitrary files, bypassing intended permissions. Note that Tenable Network Security has extracted the preceding...

USN-1485-1: AccountsService vulnerability

Florian Weimer discovered that AccountsService incorrectly handled privileges when copying certain files to the system cache directory. A local attacker could exploit this issue to read arbitrary files, bypassing intended permissions...

CVE-2012-2737

The userchangeiconfileauthorizedcb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition...

Ubuntu: Security Advisory (USN-1351-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for accountsservice USN-1351-1

Ubuntu Update for Linux kernel vulnerabilities USN-1351-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN13511.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for accountsservice USN-1351-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

[USN-1351-1] AccountsService vulnerability

========================================================================== Ubuntu Security Notice USN-1351-1 January 31, 2012 accountsservice vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its...

Ubuntu utilities security vulnerabilities

AccountsService and Software Properties privlege escalation...

Ubuntu 11.10 : accountsservice vulnerability (USN-1351-1)

Hayawardh Vijayakumar discovered that AccountsService incorrectly handled privileges when modifying the language settings on Ubuntu. A local attacker could exploit this issue to modify arbitrary files, and possibly create a denial of service or obtain increased privileges. Note that Tenable Netwo...

USN-1351-1: AccountsService vulnerability

Hayawardh Vijayakumar discovered that AccountsService incorrectly handled privileges when modifying the language settings on Ubuntu. A local attacker could exploit this issue to modify arbitrary files, and possibly create a denial of service or obtain increased privileges...

CVE-2011-4406

The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors...