dbus-glib: property access not validated

DBus-GLib 0.73 disregards the access flag of exported GObject properties, which allows local users to bypass intended access restrictions and possibly cause a denial of service by modifying properties, as demonstrated by properties of the 1 DeviceKit-Power, 2 NetworkManager, and 3 ModemManager...

Debian DSA-1955-1 : network-manager/network-manager-applet - information disclosure

It was discovered that network-manager-applet, a network management framework, lacks some dbus restriction rules, which allows local users to obtain sensitive information. If you have locally modified the /etc/dbus-1/system.d/nm-applet.conf file, then please make sure that you merge the changes...

NetworkManager: information disclosure by nm-connection-editor

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...

Ubuntu Update for network-manager-applet vulnerabilities USN-883-1

Ubuntu Update for Linux kernel vulnerabilities USN-883-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8831.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for network-manager-applet vulnerabilities USN-883-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-883-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gnome network-manager-applet unauthorized access

Unauthorized access to network connections through dbus, WPA certificate spoofing...

Preemptive Protection against HP OpenView Network Node Manager Vulnerability

A buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM program ovwebsnmpsrv.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols...

Preemptive Protection against HP OpenView Network Node Manager nnmRptConfig.exe Template Buffer Overflow Vulnerability

A stack buffer overflow vulnerability has been reported in HP OpenView Network Node Manager NNM CGI program nnmRptConfig.exe. The NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to...

Debian Security Advisory DSA 1955-1 (network-manager/network-manager-applet)

The remote host is missing an update to network-manager/network-manager-applet announced via advisory DSA 1955-1. OpenVAS Vulnerability Test $Id: deb19551.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1955-1 network-manager/network-manager-applet Authors:...

Debian: Security Advisory (DSA-1955-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2009-4145

nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...

[SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1955-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

DSA-1955-1 network-manager network-manager-applet - information disclosure

Bulletin has no description...

Ubuntu 6.06 LTS / 8.10 : network-manager vulnerability (USN-727-2)

USN-727-1 fixed vulnerabilities in network-manager-applet. This advisory provides the corresponding updates for NetworkManager. It was discovered that NetworkManager did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view system and...

Ubuntu 7.10 / 8.04 LTS / 8.10 : network-manager-applet vulnerabilities (USN-727-1)

It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view other users' network connection passwords and pre-shared keys. CVE-2009-0365 It was discovered that network-manager-applet did not...

Wicd: Information disclosure

Background Wicd is an open source wired and wireless network manager for Linux. Description Tiziano Mueller of Gentoo discovered that the DBus configuration file for Wicd allows arbitrary users to own the org.wicd.daemon object. Impact A local attacker could exploit this vulnerability to receive...

NetworkManager: GetSecrets disclosure

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...

NetworkManager: local users can modify the connection settings

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus 1 modify and 2 delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and atconsole...

Ubuntu: Security Advisory (USN-727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-727-1 (network-manager-applet)

The remote host is missing an update to network-manager-applet announced via advisory USN-727-1. OpenVAS Vulnerability Test $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-727-1...