CVE-2009-0365
Fixed in a distro release EPSS 1%
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
Products: ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | network-manager | 0.6.5-1 |
| Debian 12 | network-manager-applet | 0.7.0.99-1 |
| Debian 13 | network-manager | 0.6.5-1 |
| Debian 13 | network-manager-applet | 0.7.0.99-1 |
| Debian 14 | network-manager | 0.6.5-1 |
| Debian 14 | network-manager-applet | 0.7.0.99-1 |
| Debian 4.0 | network-manager | 0.6.4-6+etch1 |
| Debian 5.0 | network-manager-applet | 0.6.6-4+lenny1 |
| Red Hat Enterprise Linux 4 | NetworkManager | 0:0.3.1-5.el4 |
| Red Hat Enterprise Linux 4 | NetworkManager-debuginfo | 0:0.3.1-5.el4 |
| Red Hat Enterprise Linux 4 | NetworkManager-gnome | 0:0.3.1-5.el4 |
| Red Hat Enterprise Linux 5 | NetworkManager | 1:0.7.0-4.el5_3 |
| Red Hat Enterprise Linux 5 | NetworkManager-debuginfo | 1:0.7.0-4.el5_3 |
| Red Hat Enterprise Linux 5 | NetworkManager-devel | 1:0.7.0-4.el5_3 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib | 1:0.7.0-4.el5_3 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib-devel | 1:0.7.0-4.el5_3 |
| Red Hat Enterprise Linux 5 | NetworkManager-gnome | 1:0.7.0-4.el5_3 |