CVE-2012-2737 The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache director...
LowCVSS 1.9
EPSS 0.36%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/accountsservice(Debian:12) | < 0.6.21-6 | 0.6.21-6 |
| debian/accountsservice(Debian:13) | < 0.6.21-6 | 0.6.21-6 |
| debian/accountsservice(Debian:14) | < 0.6.21-6 | 0.6.21-6 |
| ray stode accountsservice | <= 0.6.21 | No fix listed |
| ray stode accountsservice | = 0.4 | No fix listed |
| ray stode accountsservice | = 0.5 | No fix listed |
| ray stode accountsservice | = 0.6 | No fix listed |
| ray stode accountsservice | = 0.6.1 | No fix listed |
| ray stode accountsservice | = 0.6.2 | No fix listed |
| ray stode accountsservice | = 0.6.3 | No fix listed |
| ray stode accountsservice | = 0.6.4 | No fix listed |
| ray stode accountsservice | = 0.6.5 | No fix listed |
| ray stode accountsservice | = 0.6.6 | No fix listed |
| ray stode accountsservice | = 0.6.7 | No fix listed |
| ray stode accountsservice | = 0.6.8 | No fix listed |
| ray stode accountsservice | = 0.6.9 | No fix listed |
| ray stode accountsservice | = 0.6.10 | No fix listed |
| ray stode accountsservice | = 0.6.11 | No fix listed |
| ray stode accountsservice | = 0.6.12 | No fix listed |
| ray stode accountsservice | = 0.6.13 | No fix listed |
| ray stode accountsservice | = 0.6.14 | No fix listed |
| ray stode accountsservice | = 0.6.15 | No fix listed |
| ray stode accountsservice | = 0.6.16 | No fix listed |
| ray stode accountsservice | = 0.6.17 | No fix listed |
| ray stode accountsservice | = 0.6.18 | No fix listed |
Show 2 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ray stode accountsservice | = 0.6.19 | No fix listed |
| ray stode accountsservice | = 0.6.20 | No fix listed |
References
- Debian Security Tracker CVE-2012-2737 vendor-advisory
- cgit.freedesktop.org exploit patch
- cgit.freedesktop.org
- cgit.freedesktop.org exploit patch
- cgit.freedesktop.org exploit patch
- FEDORA-2012-10120 vendor-advisory
- 83398 vdb-entry
- 49695 third-party-advisory vendor-advisory
- 49759 third-party-advisory vendor-advisory
- [oss-security] 20120628 accountsservice local file disclosure flaw (CVE-2012-2737) mailing-list
- 54223 vdb-entry
- USN-1485-1 vendor-advisory
- bugzilla.redhat.com
- accountsservice-userchangeicon-info-disc(76648) vdb-entry
- openSUSE-SU-2012:0845 vendor-advisory
- bugs.debian.org issue-tracking