272 matches found
openSUSE Security Update : NetworkManager-gnome (NetworkManager-gnome-1877)
nm-applet connected to WPA2 Enterprise networks even if the specified CA certificate file didn't exist CVE-2009-4144. When editing connections in nm-applet the connection object was exported via DBus disclosing potentially sensitive information to local users CVE-2009-4145. %NASLMINLEVEL 70300 C...
CVE-2009-4144
CVE-2009-4144 affects NetworkManager 0.7.x (e.g., NM 0.7.2). The CA certificate file for WPA Enterprise/802.1x could be missing at connection time, allowing a remote attacker to spoof a wireless network and potentially obtain sensitive information or cause connectivity disruption. Multiple adviso...
CVE-2009-4145
CVE-2009-4145 affects NetworkManager (NM) 0.7.x via the nm-connection-editor D-Bus interface. The vulnerability arises because NM exports connection objects over D-Bus when actions are performed in the connection editor GUI, allowing a local user to read D-Bus signals and disclose sensitive infor...
CVE-2009-4145
nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...
CVE-2009-4145: Exposure of Sensitive Information to an Unauthorized Actor
nm-connection-editor in NetworkManager NM 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network...
XEngineSoft PMS/MGS/NM/AMS 1.0 (Auth Bypass) SQL Injection Vulns
Exploit for unknown platform in category web applications ================================================================ XEngineSoft PMS/MGS/NM/AMS 1.0 Auth Bypass SQL Injection Vulns ================================================================...
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
CVE-2009-0365: Undefined Security Weakness
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover 1 network connection passwords and 2 pre-shared keys via calls to the GetSecrets method in the dbus request handler...
RHEL 2.1 : binutils (RHSA-2005:763)
An updated binutils package that fixes minor security issues is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. Binutils is a collection of utilities used for the creation of executable code. A number of bugs were found in various...
Hewlett-Packard MPE/iX NM Debug does not always handle breakpoints correctly
Overview There is a problem in the NM Debug facility of MPE/iX that allows users to gain unauthorized privileges. Description The problem affects HP3000 systems running MPE/iX versions 5.5 through 6.5. HP has published a security bulletin describing the solution to this vulnerability...
CVE-2001-0267
CVE-2001-0267 concerns a vulnerability in HP MPE/iX’s NM Debug facility. The HP NM Debug mechanism fails to handle breakpoints correctly on MPE/iX versions 5.5 through 6.5, allowing local users to gain unauthorized privileges (potentially root). CERT notes the issue enables local privilege escala...