Published: 22/07/2012 Updated: 29/08/2017

CVSS v2 Base Score: 1.9 | Impact Score: 2.9 | Exploitability Score: 3.4

VMScore: 169

Vector: AV:L/AC:M/Au:N/C:P/I:N/A:N

The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService prior to 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ray stode accountsservice 0.6.19
ray stode accountsservice 0.6.18
ray stode accountsservice 0.6.11
ray stode accountsservice 0.6.10
ray stode accountsservice 0.6.2
ray stode accountsservice 0.6.1
ray stode accountsservice 0.6.17
ray stode accountsservice 0.6.16
ray stode accountsservice 0.6.9
ray stode accountsservice 0.6.8
ray stode accountsservice 0.6.7
ray stode accountsservice 0.6.15
ray stode accountsservice 0.6.14
ray stode accountsservice 0.6.6
ray stode accountsservice 0.6.5
ray stode accountsservice 0.4
ray stode accountsservice 0.6
ray stode accountsservice 0.5
ray stode accountsservice
ray stode accountsservice 0.6.20
ray stode accountsservice 0.6.13
ray stode accountsservice 0.6.12
ray stode accountsservice 0.6.4
ray stode accountsservice 0.6.3

Debian Bug report logs - #679429 accountsservice: CVE-2012-2737 local file disclosure Package: accountsservice; Maintainer for accountsservice is Debian freedesktoporg maintainers <pkg-freedesktop-maintainers@listsaliothdebianorg>; Source for accountsservice is src:accountsservice (PTS, buildd, popcon) Reported by: Simon ...

AccountsService could be made to read arbitrary files as the administrator ...

CWE-362 http://secunia.com/advisories/49695 http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69 http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5 http://www.openwall.com/lists/oss-security/2012/06/28/9 http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d http://osvdb.org/83398 http://www.ubuntu.com/usn/USN-1485-1 http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html https://bugzilla.redhat.com/show_bug.cgi?id=832532 http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721 http://www.securityfocus.com/bid/54223 http://secunia.com/advisories/49759 https://hermes.opensuse.org/messages/15100967 https://exchange.xforce.ibmcloud.com/vulnerabilities/76648 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679429 https://usn.ubuntu.com/1485-1/https://nvd.nist.gov

CVE-2012-2737

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect