Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.2
CVSSv2

CVE-2009-0578

Published: 05/03/2009 Updated: 29/09/2017
CVSS v2 Base Score: 6.2 | Impact Score: 9.2 | Exploitability Score: 3.1
VMScore: 552
Vector: AV:L/AC:L/Au:S/C:N/I:C/A:C
Subscribe to Ubuntu

Vulnerability Summary

GNOME NetworkManager prior to 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Vulnerable Product Search on Vulmon Subscribe to Product

ubuntu ubuntu linux 8.10

Vendor Advisories

Red Hat: Moderate: NetworkManager security update
Synopsis Moderate: NetworkManager security update Type/Severity Security Advisory: Moderate Topic Updated NetworkManager packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team ...
Debian CVElist Bug Report Logs: CVE-2009-0365, CVE-2009-0578
Debian Bug report logs - #519801 CVE-2009-0365, CVE-2009-0578 Package: network-manager-applet; Maintainer for network-manager-applet is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <giuseppe@iuculanoit> Date: Sun, 15 Mar 2009 10:42:01 UTC Severity: serious ...
Ubuntu Security Notice: network-manager-applet vulnerabilities
It was discovered that network-manager-applet did not properly enforce permissions when responding to dbus requests A local user could perform dbus queries to view other users’ network connection passwords and pre-shared keys (CVE-2009-0365) ...

References

CWE-264http://www.ubuntu.com/usn/USN-727-1http://www.securityfocus.com/bid/33966http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.htmlhttp://www.securitytracker.com/id?1021909http://www.redhat.com/support/errata/RHSA-2009-0361.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=487752http://secunia.com/advisories/34473http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.htmlhttp://secunia.com/advisories/34067https://exchange.xforce.ibmcloud.com/vulnerabilities/49063https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931https://access.redhat.com/errata/RHSA-2009:0361https://usn.ubuntu.com/727-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook