Vulnerability Details : CVE-2011-4406
The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors.
Products affected by CVE-2011-4406
- cpe:2.3:o:canonical:ubuntu_linux:11.10:*:*:*:*:*:*:*
- cpe:2.3:a:canonical:accountsservice:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-4406
0.05%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 14 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-4406
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
3.6
|
LOW | AV:L/AC:L/Au:N/C:N/I:P/A:P |
3.9
|
4.9
|
NIST |
CWE ids for CVE-2011-4406
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-4406
-
http://www.ubuntu.com/usn/USN-1351-1
USN-1351-1: AccountsService vulnerability | Ubuntu security noticesVendor Advisory
-
http://bazaar.launchpad.net/~ubuntu-branches/ubuntu/oneiric/accountsservice/oneiric-updates/revision/21
~ubuntu-branches/ubuntu/oneiric/accountsservice/oneiric-updates : revision 21Patch
-
http://people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4406.html
CVE-2011-4406 in Ubuntu
Jump to