CVE-2009-4145
Fixed in a distro release EPSS <1%
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.
Products: gnome networkmanager
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | network-manager-applet | 0.7.2-2 |
| Debian 13 | network-manager-applet | 0.7.2-2 |
| Debian 14 | network-manager-applet | 0.7.2-2 |
| Red Hat Enterprise Linux 5 | NetworkManager | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-debuginfo | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-devel | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-glib-devel | 1:0.7.0-9.el5_4 |
| Red Hat Enterprise Linux 5 | NetworkManager-gnome | 1:0.7.0-9.el5_4 |