CVE-2011-4406

LOW 3.6CVE-2011-4406 · Published 16/04/2014 · updated 16/06/2026

In short

CVE-2011-4406 is a LOW (CVSS 3.6) vulnerability affecting accountsservice (canonical).
Chance of exploitation in the next 30 days (EPSS): 0.38%, higher than 31.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
accountsservice canonical	`≤ 0.6.14`	No fix yet

Description

The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors.

References

bazaar.launchpad.net/~ubuntu-branches/ubuntu/oneiric/accountsservice/oneiric-updates/revision/21 · Patch
people.canonical.com/~ubuntu-security/cve/2011/CVE-2011-4406.html
ubuntu.com/usn/USN-1351-1 · Vendor Advisory

More vulnerabilities in accountsservice

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free