Published: 23/12/2009 Updated: 19/09/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 187

Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.

Vulnerable Product	Search on Vulmon	Subscribe to Product
gnome networkmanager 0.7.2

Synopsis Moderate: NetworkManager security update Type/Severity Security Advisory: Moderate Topic Updated NetworkManager packages that fix two security issues are nowavailable for Red Hat Enterprise Linux 5This update has been rated as having moderate security impact by the RedHat Security Response Team ...

It was discovered that NetworkManager did not ensure that the Certification Authority (CA) certificate file remained present when using WPA Enterprise or 8021x networks A remote attacker could use this flaw to spoof the identity of a wireless network and view sensitive information (CVE-2009-4144) ...

Debian Bug report logs - #563371 CVE-2009-4145: information disclosure Package: network-manager-applet; Maintainer for network-manager-applet is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Reported by: Giuseppe Iuculano <iuculano@debianorg> Date: Sat, 2 Jan 2010 11:42:02 UTC Severity: ...

Debian Bug report logs - #560067 CVE-2009-4144: WPA enterprise network not verified when certificate is removed Package: network-manager-gnome; Maintainer for network-manager-gnome is Utopia Maintenance Team <pkg-utopia-maintainers@listsaliothdebianorg>; Source for network-manager-gnome is src:network-manager-applet (PTS, buildd, ...

CWE-200 http://secunia.com/advisories/37819 http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894 https://bugzilla.redhat.com/show_bug.cgi?id=546117 http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=56d87fcb86acb5359558e0a2ee702cfc0c3391f2 http://www.openwall.com/lists/oss-security/2009/12/16/3 http://www.redhat.com/support/errata/RHSA-2010-0108.html http://secunia.com/advisories/38420 http://www.securityfocus.com/bid/37580 http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html https://exchange.xforce.ibmcloud.com/vulnerabilities/54898 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539 https://access.redhat.com/errata/RHSA-2010:0108 https://usn.ubuntu.com/883-1/https://nvd.nist.gov

CVE-2009-4145

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect