CVE-2012-2737

Published: Jul 22, 2012Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The user_change_icon_file_authorized_cb function in /usr/libexec/accounts-daemon in AccountsService before 0.6.22 does not properly check the UID when copying an icon file to the system cache directory, which allows local users to read arbitrary files via a race condition.

Affected (24)

Products: Ray Stode: Accountsservice

1 product

Accountsservice

Configuration A

24 vulnerable

Vulnerable Software	Affected Versions
Ray Stode Accountsservice	Up to 0.6.21
Ray Stode Accountsservice	Version 0.4
Ray Stode Accountsservice	Version 0.5
Ray Stode Accountsservice	Version 0.6.10
Ray Stode Accountsservice	Version 0.6.11
Ray Stode Accountsservice	Version 0.6.12
Ray Stode Accountsservice	Version 0.6.13
Ray Stode Accountsservice	Version 0.6.14
Ray Stode Accountsservice	Version 0.6.15
Ray Stode Accountsservice	Version 0.6.16
Ray Stode Accountsservice	Version 0.6.17
Ray Stode Accountsservice	Version 0.6.18
Ray Stode Accountsservice	Version 0.6.19
Ray Stode Accountsservice	Version 0.6.1
Ray Stode Accountsservice	Version 0.6.20
Ray Stode Accountsservice	Version 0.6.2
Ray Stode Accountsservice	Version 0.6.3
Ray Stode Accountsservice	Version 0.6.4
Ray Stode Accountsservice	Version 0.6.5
Ray Stode Accountsservice	Version 0.6.6
Ray Stode Accountsservice	Version 0.6.7
Ray Stode Accountsservice	Version 0.6.8
Ray Stode Accountsservice	Version 0.6.9
Ray Stode Accountsservice	Version 0.6

Related CWEs

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (28)

http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69

Source: secalert@redhat.com

http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d

Source: secalert@redhat.com

ExploitPatch

http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721

Source: secalert@redhat.com

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html

Source: secalert@redhat.com

http://osvdb.org/83398

Source: secalert@redhat.com

http://secunia.com/advisories/49695

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/49759

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/06/28/9

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54223

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1485-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=832532

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76648

Source: secalert@redhat.com

https://hermes.opensuse.org/messages/15100967

Source: secalert@redhat.com

http://cgit.freedesktop.org/accountsservice/commit/?id=26213aa0e0d8dca5f36cc23f6942525224cbe9f5

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/accountsservice/commit/?id=27f3d93a82fde4f6c7ab54f3f008af04f93f9c69

Source: af854a3a-2127-422b-91ae-364da2661108

http://cgit.freedesktop.org/accountsservice/commit/?id=4c5b12e363410e490e776e4b4a86dcce157a543d

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://cgit.freedesktop.org/accountsservice/commit/?id=bd51aa4cdac380f55d607f4ffdf2ab3c00d08721

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2012-July/083359.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/83398

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49695

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/49759

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2012/06/28/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/54223

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1485-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=832532

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/76648

Source: af854a3a-2127-422b-91ae-364da2661108

https://hermes.opensuse.org/messages/15100967

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.