Wicd 'SetWirelessProperty()'本地特权提升漏洞

Bugtraq ID: 52987 CVE ID：CVE-2012-2095 Wicd是一个适用于Linux系统的无线网络连接管理器。 当设置某些属性时"SetWiredProperty"方法wicd-daemon.py存在输入过滤错误，攻击者可以利用漏洞通过DBus接口注入任意代码并执行。 0 Wicd 1.5.9 Wicd 1.5.8 Wicd 1.7.1b3-4 Wicd 1.7.1b3-3 Debian Linux 5.0 Debian Linux 4.0 Backtrack-Linux Backtrack Linux 厂商解决方案 Wicd...

WICD 1.7.1 - Local Privilege Escalation

!/usr/bin/python wicd = 1.7.1 0day exploit discovered on 4.9.12 by InfoSec Institute student For full write up and description go to http://www.infosecinstitute.com/courses/ethicalhackingtraining.html import sys import os import time import getopt try: from wicd import dbusmanager except: print "...

WICD 1.7.1 - Local Privilege Escalation

WICD 1.7.1 - Local Privilege Escalation !/usr/bin/python wicd = 1.7.1 0day exploit discovered on 4.9.12 by InfoSec Institute student For full write up and description go to http://www.infosecinstitute.com/courses/ethicalhackingtraining.html import sys import os import time import getopt try: from...

Critical Flaw Found In WICD Component in Some Versions of Linux

UPDATE: A critical security flaw has been identified in a component of the latest version of Backtrack, a popular version of Linux that is used by security professionals for penetration testing. The flaw is in WICD, an open source utility that can be used to manage networks in Linux operating...

wicd Privilege Escalation

========================================== EXPLOIT: !/usr/bin/python wicd 0day exploit discovered on 4.9.12 by InfoSec Institute student For full write up and description go to http://www.infosecinstitute.com/courses/ethicalhackingtraining.html import sys import os import time import getopt try:...

Fedora Update for wicd FEDORA-2012-1059

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for wicd FEDORA-2012-1059

Check for the Version of wicd OpenVAS Vulnerability Test Fedora Update for wicd FEDORA-2012-1059 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for wicd FEDORA-2012-1077

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for wicd FEDORA-2012-1077

Check for the Version of wicd OpenVAS Vulnerability Test Fedora Update for wicd FEDORA-2012-1077 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: wicd-1.7.0-10.fc16

Wicd is designed to give the user as much control over behavior of network connections as possible. Every network, both wired and wireless, has its own profile with its own configuration options and connection behavior. Wicd will try to automatically connect only to networks the user specifies it...

Fedora 16 : wicd-1.7.0-10.fc16 (2012-1059)

CVE-2012-0813 A sensitive information disclosure flaw was found in the way wicd, wireless and wired network connection manager, performed management of sensitive information, to be stored in log files. Fields like 'password', 'identity', 'privatekey', 'privatekeypasswd' etc., were not excluded...

Fedora 15 : wicd-1.7.0-11.fc15 (2012-1077)

CVE-2012-0813 A sensitive information disclosure flaw was found in the way wicd, wireless and wired network connection manager, performed management of sensitive information, to be stored in log files. Fields like 'password', 'identity', 'privatekey', 'privatekeypasswd' etc., were not excluded...

Gentoo Security Advisory GLSA 200904-12 (wicd)

The remote host is missing updates announced in advisory GLSA 200904-12. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200904-12 (wicd)

The remote host is missing updates announced in advisory GLSA 200904-12. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Wicd wicd.conf默认配置本地信息泄露漏洞

BUGTRAQ ID: 33658 CVECAN ID: CVE-2009-0489 Wicd是Linux平台下的开源有线和无线网络管理器。 Wicd的dbus配置文件默认允许任何用户拥有org.wicd.daemon对象，这可能允许用户接收本应发送给wicd守护程序的消息，消息中包含网络凭据等敏感信息。 Wicd = 1.5.8 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200904-12）以及相应补丁: GLSA-200904-12：Wicd: Information disclosure...

Wicd information leak

User can hijack DBus messages intended for Wicd server process...

[Full-disclosure] [ GLSA 200904-12 ] Wicd: Information disclosure

Gentoo Linux Security Advisory GLSA 200904-12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

GLSA-200904-12 : Wicd: Information disclosure

The remote host is affected by the vulnerability described in GLSA-200904-12 Wicd: Information disclosure Tiziano Mueller of Gentoo discovered that the DBus configuration file for Wicd allows arbitrary users to own the org.wicd.daemon object. Impact : A local attacker could exploit this...

Wicd: Information disclosure

Background Wicd is an open source wired and wireless network manager for Linux. Description Tiziano Mueller of Gentoo discovered that the DBus configuration file for Wicd allows arbitrary users to own the org.wicd.daemon object. Impact A local attacker could exploit this vulnerability to receive...

Slackware 12.2 / current : wicd (SSA:2009-040-01)

New wicd packages are available for Slackware 12.2 and -current to fix a security issue with the D-Bus configuration file that could allow local information disclosure such as network credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...