3.3
CVSSv3

CVE-2012-6655

Published: 27/11/2019 Updated: 18/08/2020
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 3.3 | Impact Score: 1.4 | Exploitability Score: 1.8
VMScore: 188
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

accountsservice project accountsservice 0.6.37

opensuse opensuse 13.1

debian debian linux 8.0

debian debian linux 9.0

debian debian linux 10.0

redhat enterprise linux 7.0

Vendor Advisories

Debian Bug report logs - #757912 accountsservice: CVE-2012-6655: passes (encrypted) passwords as commandline arguments Package: accountsservice; Maintainer for accountsservice is Debian freedesktoporg maintainers <pkg-freedesktop-maintainers@listsaliothdebianorg>; Source for accountsservice is src:accountsservice (PTS, buildd, p ...

Github Repositories

NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector

cmon Table of Contents Overview Example JSON Output Install Install Dependencies Server Client Getting Started Vagrant Command-Line Arguments Configuration Vagrant Platforms Tested On Overview NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector Great for keeping track of elastic environments, auditing or migrating servers

NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector

cmon Table of Contents Overview Example JSON Output Install Install Dependencies Server Client Getting Started Vagrant Command-Line Arguments Configuration Vagrant Platforms Tested On Overview NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector Great for keeping track of elastic environments, auditing or migrating servers