CVE catalog

CVE-2012-6655

accountsservice: CVE-2012-6655

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
0.45% · Oct 25, 2026

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianaccountsservicesid26.27.3-2fixed
Debianaccountsserviceforky23.13.9-8fixed
Debianaccountsservicetrixie23.13.9-7fixed
Debianaccountsservicebookworm22.08.8-6fixed
Ubuntuaccountsservicepro0.6.42-0ubuntu3vulnerable
Ubuntuaccountsservicepro0.6.42-0ubuntu4vulnerable
Ubuntuaccountsservicepro0.6.45-1ubuntu1vulnerable
Ubuntuaccountsservicepro0.6.45-1ubuntu1.3vulnerable
Ubuntuaccountsservicepro0.6.45-1ubuntu1.3+esm1vulnerable
Ubuntuaccountsservicepro0.6.45-1ubuntu1.3+esm2vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu10vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu11vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.1vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.2vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.4vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.5vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.6vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.7fixed
Ubuntuaccountsservice22.040.6.55-0ubuntu14vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu1vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu2vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu4vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu5vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu6vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.3vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.4vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.5fixed
Ubuntuaccountsservice20.040.6.55-0ubuntu10vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu11vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.1vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.2vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.4vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.5vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.6vulnerable
Ubuntuaccountsservice20.040.6.55-0ubuntu12~20.04.7fixed
Ubuntuaccountsservice22.040.6.55-0ubuntu14vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu1vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu2vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu4vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu5vulnerable
Ubuntuaccountsservice22.040.6.55-3ubuntu6vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.3vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.4vulnerable
Ubuntuaccountsservice22.0422.07.5-2ubuntu1.5fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianaccountsservicesourcesid22.08.8-4lowNot reported[757912]
Debianaccountsservicesourceforky22.08.8-4lowNot reported[757912]
Debianaccountsservicesourcetrixie22.08.8-4lowNot reported[757912]
Debianaccountsservicesourcebookworm22.08.8-4lowNot reported[757912]
Ubuntuaccountsservicedeb20.040.6.55-0ubuntu12~20.04.7Not reportedUBUNTU-CVE-2012-6655Not reported
Ubuntuaccountsservicedeb22.0422.07.5-2ubuntu1.5Not reportedUBUNTU-CVE-2012-6655Not reported
Ubuntuaccountsservicedeb20.040.6.55-0ubuntu12~20.04.7Not reportedUSN-6687-1Not reported
Ubuntuaccountsservicedeb22.0422.07.5-2ubuntu1.5Not reportedUSN-6687-1Not reported

[Debian bug #757912]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [accountsservice]Fixed
    Details (2)

    • 22.08.8-6 · amd64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

    • 22.08.8-6 · arm64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

  • [gir1.2-accountsservice-1.0]Fixed

    Source package: [accountsservice]

    Details (2)

    • 22.08.8-6 · amd64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

    • 22.08.8-6 · arm64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

  • [libaccountsservice0]Fixed

    Source package: [accountsservice]

    Details (2)

    • 22.08.8-6 · amd64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

    • 22.08.8-6 · arm64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

  • [libaccountsservice-dev]Fixed

    Source package: [accountsservice]

    Details (2)

    • 22.08.8-6 · amd64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

    • 22.08.8-6 · arm64 · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

  • [libaccountsservice-doc]Fixed

    Source package: [accountsservice]

    Details (2)

    • 22.08.8-6 · all · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

    • 22.08.8-6 · all · bookworm

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · bookworm; dsa · accountsservice · debian · 12

[Debian 13 (Trixie)]

  • [accountsservice]Fixed
    Details (2)

    • 23.13.9-7 · amd64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

    • 23.13.9-7 · arm64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

  • [gir1.2-accountsservice-1.0]Fixed

    Source package: [accountsservice]

    Details (2)

    • 23.13.9-7 · amd64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

    • 23.13.9-7 · arm64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

  • [libaccountsservice0]Fixed

    Source package: [accountsservice]

    Details (2)

    • 23.13.9-7 · amd64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

    • 23.13.9-7 · arm64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

  • [libaccountsservice-dev]Fixed

    Source package: [accountsservice]

    Details (2)

    • 23.13.9-7 · amd64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

    • 23.13.9-7 · arm64 · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

  • [libaccountsservice-doc]Fixed

    Source package: [accountsservice]

    Details (2)

    • 23.13.9-7 · all · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

    • 23.13.9-7 · all · trixie

      Fixed · Fixed: 22.08.8-4

      dsa · accountsservice · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]