CVE-2011-4406: Canonical Accountsservice

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

The Ubuntu AccountsService package before 0.6.14-1git1ubuntu1.1 does not properly drop privileges when changing language settings, which allows local users to modify arbitrary files via unspecified vectors.

Affected products

• Canonical Accountsservice: up to and including 0.6.14
• Canonical Ubuntu Linux: version 11.10 only

Published 2014-04-16. Last modified 2026-06-16.