CVE-2012-6655

LowCVSS 3.3/10Last modified Jun 16, 2026

Description

An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2014/08/16/7Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/69245Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6655Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6655Exploit, Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95325Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-6655Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/08/16/7Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/69245Third Party Advisory, VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-6655Issue Tracking, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-6655Exploit, Issue Tracking, Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95325Third Party Advisory, VDB Entry
https://security-tracker.debian.org/tracker/CVE-2012-6655Third Party Advisory

Timeline

Published: Nov 27, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-66565.0iconvdata/ibm930.c in GNU C Library (aka glibc) before 2.16 allows context-dependent attackers to cause a denial of service (out-of-bounds r CVE-2012-66574.9The sock_setsockopt function in net/core/sock.c in the Linux kernel before 3.5.7 does not ensure that a keepalive action is associated with CVE-2012-66584.3Multiple cross-site scripting (XSS) vulnerabilities in SpiceWorks 5.3.75941 allow remote attackers to inject arbitrary web script or HTML vi CVE-2012-66594.3Cross-site scripting (XSS) vulnerability in the admin interface in Phorum before 5.2.19 allows remote attackers to inject arbitrary web scri CVE-2012-666010.0GE Healthcare Precision MPi has a password of (1) orion for the serviceapp user, (2) orion for the clinical operator user, and (3) PlatinumO CVE-2012-66615.0Zope before 2.13.19, as used in Plone before 4.2.3 and 4.3 before beta 1, does not reseed the pseudo-random number generator (PRNG), which m CVE-2012-66624.3Cross-site scripting (XSS) vulnerability in the default content option in jquery.ui.tooltip.js in the Tooltip widget in jQuery UI before 1.1 CVE-2012-66637.5General Electric D20ME devices are not properly configured and reveal plaintext passwords.CVE-2012-66649.1Multiple directory traversal vulnerabilities in the TFTP Server in Distinct Intranet Servers 3.10 and earlier allow remote attackers to read CVE-2012-66654.3Directory traversal vulnerability in index.php in phpMoneyBooks 1.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in CVE-2012-66666.1vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter.CVE-2012-66676.1Cross-site scripting (XSS) vulnerability in vbshout.php in DragonByte Technologies vBShout module for vBulletin allows remote attackers to i