SUSE CVE-2018-14036

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in userchangeiconfileauthorizedcb in user.c...

accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in userchangeiconfileauthorizedcb in user.c...

CVE-2018-14036

CVE-2018-14036 : Affected component is AccountsService (before 0.6.50) with an insufficient path check in user_change_icon_file_authorized_cb() in user.c, enabling a directory traversal via ../ sequences. Public references in Ubuntu USN-4616-1, SUSE/SUSE-SU advisories, and OpenVAS/Nessus entries ...

PT-2018-12292

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.50 Description The issue arises from an insufficient path check in the user change icon file authorized cb function, located in user.c, allowing Directory Traversal with ../ sequences. Recommendations For...

PT-2012-4225

Name of the Vulnerable Software and Affected Versions AccountsService versions prior to 0.6.22 Description The issue is related to the user change icon file authorized cb function in /usr/libexec/accounts-daemon, which does not properly check the UID when copying an icon file to the system cache...