Local Privilege Escalation Vulnerability in Ubuntu AccountsService
CVE-2011-4406

Currently unrated

Key Information:

Vendor

Canonical

Status
Accountsservice
Ubuntu Linux
Vendor
CVE Published:
16 April 2014

What is CVE-2011-4406?

The Ubuntu AccountsService package prior to version 0.6.14-1git1ubuntu1.1 fails to adequately enforce privilege restrictions when users attempt to change language settings. This oversight allows local users to potentially manipulate system files through unspecified methods, creating a risk of unauthorized alterations and security breaches.

References

http://people.canonical.com/~ubuntu-security/cve/2011/CVE...
x_refsource_CONFIRM
http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/oneir...
x_refsource_CONFIRM
http://www.ubuntu.com/usn/USN-1351-1
vendor-advisoryx_refsource_UBUNTU

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.