Unscored severity · published Mar 5, 2009
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared…
–
CVSS
1.1%
EPSS
No
On KEV
Description
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
Ubuntu Linux · Ubuntu
6.06; 7.10; 8.04; 8.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0365
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0365
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
secunia.com
http://secunia.com/advisories/34067
secunia.com
http://secunia.com/advisories/34177
secunia.com
http://secunia.com/advisories/34473
securitytracker.com
http://securitytracker.com/id?1021910
More from Ubuntu Linux
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
5.5
CVE-2006-5648
Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list…
5.5
CVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service…
–
CVE-2010-0834
The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require…
–
CVE-2009-0578
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network…