4.6
CVSSv2

CVE-2009-0365

Published: 05/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.9 | Exploitability Score: 3.1
VMScore: 409
Vector: AV:L/AC:L/Au:S/C:C/I:N/A:N

Vulnerability Summary

nm-applet.conf in GNOME NetworkManager prior to 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.

Vulnerable Product Search on Vulmon Subscribe to Product

ubuntu ubuntu linux 6.06

ubuntu ubuntu linux 8.10

ubuntu ubuntu linux 7.10

ubuntu ubuntu linux 8.04

Vendor Advisories

Debian Bug report logs - #519801 CVE-2009-0365, CVE-2009-0578 Package: network-manager-applet; Maintainer for network-manager-applet is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Sun, 15 Mar 2009 10:42:01 UTC Severity: serious ...
Synopsis Moderate: NetworkManager security update Type/Severity Security Advisory: Moderate Topic Updated NetworkManager packages that fix a security issue are now availablefor Red Hat Enterprise Linux 4This update has been rated as having moderate security impact by the RedHat Security Response Team ...
Synopsis Moderate: NetworkManager security update Type/Severity Security Advisory: Moderate Topic Updated NetworkManager packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team ...
USN-727-1 fixed vulnerabilities in network-manager-applet This advisory provides the corresponding updates for NetworkManager ...
It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests A local user could perform dbus queries to view other users’ network connection passwords and pre-shared keys (CVE-2009-0365) ...
It was discovered that network-manager-applet, a network management framework, lacks some dbus restriction rules, which allows local users to obtain sensitive information If you have locally modified the /etc/dbus-1/systemd/nm-appletconf file, then please make sure that you merge the changes from this fix when asked during upgrade For the oldst ...