ByteOS Network

CVE Vulnerability Details :

CVE-2012-2737

PUBLISHED

More Info Official Page

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-22 Jul, 2012 | 17:00

Updated At-06 Aug, 2024 | 19:42

▼CVE Numbering Authority (CNA)

The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/54223	vdb-entry x_refsource_BID
http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721	x_refsource_CONFIRM
http://secunia.com/advisories/49695	third-party-advisory x_refsource_SECUNIA
http://www.ubuntu.com/usn/USN-1485-1	vendor-advisory x_refsource_UBUNTU
https://bugzilla.redhat.com/show_bug.cgi?id=832532	x_refsource_MISC
http://secunia.com/advisories/49759	third-party-advisory x_refsource_SECUNIA
http://osvdb.org/83398	vdb-entry x_refsource_OSVDB
https://exchange.xforce.ibmcloud.com/vulnerabilities/76648	vdb-entry x_refsource_XF
https://hermes.opensuse.org/messages/15100967	vendor-advisory x_refsource_SUSE
http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5	x_refsource_CONFIRM
http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69	x_refsource_CONFIRM
http://www.openwall.com/lists/oss-security/2012/06/28/9	mailing-list x_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html	vendor-advisory x_refsource_FEDORA
http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d	x_refsource_CONFIRM

Hyperlink: http://www.securityfocus.com/bid/54223

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/49695

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.ubuntu.com/usn/USN-1485-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=832532

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/49759

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://osvdb.org/83398

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/76648

Resource:

vdb-entry

x_refsource_XF

Hyperlink: https://hermes.opensuse.org/messages/15100967

Resource:

vendor-advisory

x_refsource_SUSE

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5

Resource:

x_refsource_CONFIRM

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.openwall.com/lists/oss-security/2012/06/28/9

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/54223	vdb-entry x_refsource_BID x_transferred
http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/49695	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.ubuntu.com/usn/USN-1485-1	vendor-advisory x_refsource_UBUNTU x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=832532	x_refsource_MISC x_transferred
http://secunia.com/advisories/49759	third-party-advisory x_refsource_SECUNIA x_transferred
http://osvdb.org/83398	vdb-entry x_refsource_OSVDB x_transferred
https://exchange.xforce.ibmcloud.com/vulnerabilities/76648	vdb-entry x_refsource_XF x_transferred
https://hermes.opensuse.org/messages/15100967	vendor-advisory x_refsource_SUSE x_transferred
http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5	x_refsource_CONFIRM x_transferred
http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69	x_refsource_CONFIRM x_transferred
http://www.openwall.com/lists/oss-security/2012/06/28/9	mailing-list x_refsource_MLIST x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html	vendor-advisory x_refsource_FEDORA x_transferred
http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.securityfocus.com/bid/54223

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/49695

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.ubuntu.com/usn/USN-1485-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=832532

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://secunia.com/advisories/49759

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://osvdb.org/83398

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/76648

Resource:

vdb-entry

x_refsource_XF

x_transferred

Hyperlink: https://hermes.opensuse.org/messages/15100967

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2012/06/28/9

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d

Resource:

x_refsource_CONFIRM

x_transferred

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References