[SECURITY] [DSA 1955-1] New network-manager/network-manager-applet packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1955-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

DSA-1955-1 network-manager network-manager-applet - information disclosure

Bulletin has no description...

Ubuntu 7.10 / 8.04 LTS / 8.10 : network-manager-applet vulnerabilities (USN-727-1)

It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view other users' network connection passwords and pre-shared keys. CVE-2009-0365 It was discovered that network-manager-applet did not...

Ubuntu 6.06 LTS / 8.10 : network-manager vulnerability (USN-727-2)

USN-727-1 fixed vulnerabilities in network-manager-applet. This advisory provides the corresponding updates for NetworkManager. It was discovered that NetworkManager did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view system and...

Wicd: Information disclosure

Background Wicd is an open source wired and wireless network manager for Linux. Description Tiziano Mueller of Gentoo discovered that the DBus configuration file for Wicd allows arbitrary users to own the org.wicd.daemon object. Impact A local attacker could exploit this vulnerability to receive...

NetworkManager: local users can modify the connection settings

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus 1 modify and 2 delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and atconsole...

NetworkManager: GetSecrets disclosure

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...

Ubuntu: Security Advisory (USN-727-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-727-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu USN-727-2 (network-manager)

The remote host is missing an update to network-manager announced via advisory USN-727-2. OpenVAS Vulnerability Test $Id: ubuntu7272.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7272.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-727-2 network-manager...

Ubuntu USN-727-1 (network-manager-applet)

The remote host is missing an update to network-manager-applet announced via advisory USN-727-1. OpenVAS Vulnerability Test $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7271.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-727-1...

Ubuntu network-manager-applet错误权限限制漏洞

BUGTRAQ ID: 33966 CVECAN ID: CVE-2009-0365,CVE-2009-0578 dnetwork-manager-applet是Ubuntu系统中所使用的网络管理程序。 network-manager-applet在响应dbus请求时没有正确地强制权限，本地用户可以通过dbus请求查看其他用户的网络连接口令和预共享密钥。 network-manager-applet在响应dbus modify和delete请求时没有正确地强制权限，本地用户可以使用dbus请求修改或删除其他用户的网络连接。 Ubuntu Linux 8.10 Ubuntu Linux...

DEBIAN-CVE-2009-0365

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...

[USN-727-1] network-manager-applet vulnerabilities

=========================================================== Ubuntu Security Notice USN-727-1 March 03, 2009 network-manager-applet vulnerabilities CVE-2009-0365, CVE-2009-0578 =========================================================== A security issue affects the following Ubuntu releases: Ubunt...

USN-727-1: network-manager-applet vulnerabilities

It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests. A local user could perform dbus queries to view other users' network connection passwords and pre-shared keys. CVE-2009-0365 It was discovered that network-manager-applet did not...

CVE-2008-4562

Buffer overflow in the ovlaunch CGI program in HP OpenView Network Node Manager OV NNM 7.01, 7.51, and 7.53 on Windows allows remote attackers to execute arbitrary code via a crafted Host parameter. NOTE: this issue may be partially covered by CVE-2009-0205...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

No description provided by source. !usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Castle Rock Computing SNMPc < 7.1.1 - 'Community' Remote Buffer Overflow (PoC)

!usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

castlerock-overflow.txt

!usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Castle Rock Computing SNMPc <= 7.0.19 - Community String Stack Based Buffer Overflow Vulnerability

Castle Rock Computing SNMPc 7.0.19 Community String Stack Based Buffer Overflow Vulnerability. CVE-2008-2214. Remote exploits for multiple platform source: http://www.securityfocus.com/bid/28990/info Castle Rock Computing SNMPc is prone to a stack-based buffer-overflow vulnerability because it...