CVE:CVE-2012-6655
CNNVD:CNNVD-201408-349
AccountsService是英国科能（Canonical）公司和Ubuntu基金会共同开发的一个用于访问用户帐户和资料列表的D-Bus服务包。
AccountService 0.6.37版本中的user.c文件的‘user_change_password_authorized_cb() ’函数存在安全漏洞。本地攻击者可利用该漏洞获取加密密码。
solution:Upgrade accountsservice_project accountsservice to a higher version than 0.6.37,and avoid the version 0.6.37; Upgrade opensuse opensuse to a higher version than 13.1,and avoid the version 13.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade redhat enterprise_linux to a higher version than 7.0,and avoid the version 7.0