Lucene search
Ubuntu.comUB:CVE-2009-4145HistoryDec 23, 2009 - 12:00 a.m.
CVE-2009-4145
2009-12-2300:00:00
ubuntu.com
ubuntu.com
5
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection
objects over D-Bus upon actions in the connection editor GUI, which allows
local users to obtain sensitive information by reading D-Bus signals, as
demonstrated by using dbus-monitor to discover the password for the WiFi
network.
Bugs
- <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=563371>
- <https://bugzilla.redhat.com/show_bug.cgi?id=546117>
Notes
| Author | Note |
|---|---|
| mdeslaur | reproducer in RH bug already fixed in 0.8 |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 8.10 | noarch | network-manager-applet | < 0.7~~svn20081020t000444-0ubuntu1.8.10.3 | UNKNOWN |
| ubuntu | 9.04 | noarch | network-manager-applet | < 0.7.1~rc4.1-0ubuntu2.1 | UNKNOWN |
Related
veracode
veracode
Information Disclosure
2020-04-10 00:42:20
prion
prion
Default credentials
2009-12-23 20:30:00
cve
cve
CVE-2009-4145
2009-12-23 20:30:00
cvelist
cvelist
CVE-2009-4145
2009-12-23 20:00:00
debiancve
debiancve
CVE-2009-4145
2009-12-23 20:30:00
nessus
nessus
RHEL 5 : NetworkManager (RHSA-2010:0108)
2010-02-17 00:00:00
Fedora 11 : NetworkManager-0.7.2-2.git20091223.fc11 (2009-13642)
2010-02-25 00:00:00
Ubuntu 8.10 / 9.04 : network-manager-applet vulnerabilities (USN-883-1)
2013-03-09 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-883-1)
2010-01-19 00:00:00
Ubuntu Update for network-manager-applet vulnerabilities USN-883-1
2010-01-19 00:00:00
RedHat Update for NetworkManager RHSA-2010:0108-01
2010-02-19 00:00:00
centos
centos
NetworkManager security update
2010-02-23 00:09:27
fedora
fedora
[SECURITY] Fedora 11 Update: NetworkManager-0.7.2-2.git20091223.fc11
2010-01-02 21:31:41
ubuntu
ubuntu
network-manager-applet vulnerabilities
2010-01-13 00:00:00
oraclelinux
oraclelinux
NetworkManager security update
2010-02-16 00:00:00
redhat
redhat
(RHSA-2010:0108) Moderate: NetworkManager security update
2010-02-16 00:00:00
securityvulns
securityvulns
Gnome network-manager-applet unauthorized access
2010-01-17 00:00:00
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for UB:CVE-2009-4145