Vulnerability in Canonical Accountsservice
CVE-2011-4406
The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors.
EPSS: 0.004 (30.2th percentile) — read the EPSS interpretation.
Affected products
- Canonical Accountsservice
- Canonical Ubuntu_linux — versions 11.10
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (x_refsource_CONFIRM, Patch)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory, Vendor Advisory)