4 results · Feed
-
Medium 5.5
Accountsservice: accountsservice: arbitrary file read via seticonfile for systemd-homed users
A flaw was found in accountsservice. The systemd-homed code path for SetIconFile opens a user-supplied filename as root without the validation and privilege drop performed by the classic handler. A local attacker with a systemd-homed-managed account can read …
-
Medium 5.5
Accountsservice incorrectly drops privileges
accountsservice no longer drops permissions when writting .pam_environment
-
High 8.1
In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservic…
-
Unscored —
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a …