CVE-2009-4144

NetworkManager (NM) 0.7.2 does not ensure that the configured Certification
Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x
network remains present upon a connection attempt, which might allow remote
attackers to obtain sensitive information or cause a denial of service
(connectivity disruption) by spoofing the identity of a wireless network.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-4144&gt;

Notes