NVD Vulnerability Detail

CVE-2012-6655

Summary	An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.
Publication Date	Nov. 28, 2019, 3:15 a.m.
Registration Date	Jan. 28, 2021, 3:08 p.m.
Last Update	Nov. 21, 2024, 10:46 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:accountsservice_project:accountsservice:0.6.37:::::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:o:opensuse:opensuse:13.1:::::::*

Configuration4		or higher	or less	more than	less than
cpe:2.3:o:redhat:enterprise_linux:7.0:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.openwall.com/lists/oss-security/2014/08/16/7	Mailing List Third Party Advisory
2	http://www.openwall.com/lists/oss-security/2014/08/16/7	Mailing List Third Party Advisory
3	http://www.securityfocus.com/bid/69245	Third Party Advisory VDB Entry
4	http://www.securityfocus.com/bid/69245	Third Party Advisory VDB Entry
5	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6655	Issue Tracking Third Party Advisory
6	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6655	Issue Tracking Third Party Advisory
7	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6655	Exploit Issue Tracking Third Party Advisory
8	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6655	Exploit Issue Tracking Third Party Advisory
9	https://exchange.xforce.ibmcloud.com/vulnerabilities/95325	Third Party Advisory VDB Entry
10	https://exchange.xforce.ibmcloud.com/vulnerabilities/95325	Third Party Advisory VDB Entry
11	https://security-tracker.debian.org/tracker/CVE-2012-6655	Third Party Advisory
12	https://security-tracker.debian.org/tracker/CVE-2012-6655	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-732	重要なリソースに対する不適切なパーミッションの割り当て	https://cwe.mitre.org/data/definitions/732.html

JVN Vulnerability Information

AccountService における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性

Title	AccountService における重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性
Summary	AccountService には、重要なリソースに対する不適切なパーミッションの割り当てに関する脆弱性が存在します。
Possible impacts	情報を取得される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Aug. 16, 2012, midnight
Registration Date	Dec. 19, 2019, 4:24 p.m.
Last Update	Dec. 19, 2019, 4:24 p.m.

Affected System

レッドハット

Red Hat Enterprise Linux

Debian

Debian GNU/Linux

openSUSE project

openSUSE

AccountsService

AccountsService 0.6.37

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2012-6655	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6655
Debian Security Tracker
2	CVE-2012-6655	https://security-tracker.debian.org/tracker/CVE-2012-6655
National Vulnerability Database (NVD)
3	CVE-2012-6655	https://nvd.nist.gov/vuln/detail/CVE-2012-6655

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-732	https://cwe.mitre.org/data/definitions/732.html

ベンダー情報

No	Name	URL
Bugzilla
1	Bug 892382	https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6655
freedesktop.org
2	accountsservice	https://cgit.freedesktop.org/accountsservice/
Red Hat Bugzilla
3	Bug 1130538	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6655

その他

No	Name	URL
関連文書
1	accountsservice-cve20126655-info-disc (95325) (AccountsService user.c information disclosure )	https://exchange.xforce.ibmcloud.com/vulnerabilities/95325

Change Log

No	Changed Details	Date of change
1	[2019年12月19日] 掲載	Dec. 19, 2019, 4:24 p.m.