Published: 07/04/2014 Updated: 08/04/2014

CVSS v2 Base Score: 6.9 | Impact Score: 10 | Exploitability Score: 3.4

VMScore: 695

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

The SetWiredProperty function in the D-Bus interface in WICD prior to 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.

Vulnerable Product	Search on Vulmon	Subscribe to Product
fedoraproject fedora 15
david paleino wicd 1.5.3
david paleino wicd 1.5.2
david paleino wicd 1.5.1
david paleino wicd 1.5.0
fedoraproject fedora 16
david paleino wicd
david paleino wicd 1.5.6
david paleino wicd 1.5.4
david paleino wicd 1.4.2
david paleino wicd 1.4.0
david paleino wicd 1.7.0
david paleino wicd 1.6.2
david paleino wicd 1.6.0
david paleino wicd 1.5.9
david paleino wicd 1.5.8
david paleino wicd 1.2.7
fedoraproject fedora 17
david paleino wicd 1.7.1
david paleino wicd 1.5.7
david paleino wicd 1.5.5
david paleino wicd 1.4.1
david paleino wicd 1.3.1

Debian Bug report logs - #668397 wicd: Local privilege escalation Package: wicd; Maintainer for wicd is Debian WICD Packaging Team <pkg-wicd-maint@listsaliothdebianorg>; Source for wicd is src:wicd (PTS, buildd, popcon) Reported by: Arno Töll <arno@debianorg> Date: Wed, 11 Apr 2012 15:30:04 UTC Severity: critic ...

#!/usr/bin/python #wicd <= 171 0day exploit discovered on 4912 by InfoSec Institute student #For full write up and description go to wwwinfosecinstitutecom/courses/ethical_hacking_traininghtml import sys import os import time import getopt try: from wicd import dbusmanager except: print "[!] WICD Error: libraries are not availab ...

CWE-20 http://www.openwall.com/lists/oss-security/2012/04/11/3 http://www.gentoo.org/security/en/glsa/glsa-201206-08.xml http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397 https://launchpad.net/wicd/+announcement/9888 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079055.html http://secunia.com/advisories/48759 http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html http://secunia.com/advisories/49657 http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079029.html http://www.exploit-db.com/exploits/18733 http://www.openwall.com/lists/oss-security/2012/04/11/2 http://www.securityfocus.com/bid/52987 https://bugs.launchpad.net/wicd/+bug/979221 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397 https://nvd.nist.gov https://www.exploit-db.com/exploits/18733/

CVE-2012-2095

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect