Unscored severity · published Mar 5, 2009
CVE-2009-0578
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network…
–
CVSS
0.3%
EPSS
No
On KEV
Description
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
Ubuntu Linux · Ubuntu
8.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0578
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0578
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
secunia.com
http://secunia.com/advisories/34067
secunia.com
http://secunia.com/advisories/34473
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2009-0361.html
www.securityfocus.com
http://www.securityfocus.com/bid/33966
More from Ubuntu Linux
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
5.5
CVE-2006-5648
Ubuntu Linux 6.10 for the PowerPC (PPC) allows local users to cause a denial of service (resource consumption) by using the (1) sys_get_robust_list and (2) sys_set_robust_list…
5.5
CVE-2006-5649
Unspecified vulnerability in the "alignment check exception handling" in Ubuntu 5.10, 6.06 LTS, and 6.10 for the PowerPC (PPC) allows local users to cause a denial of service…
–
CVE-2010-0834
The base-files package before 5.0.0ubuntu7.1 on Ubuntu 9.10 and before 5.0.0ubuntu20.10.04.2 on Ubuntu 10.04 LTS, as shipped on Dell Latitude 2110 netbooks, does not require…
–
CVE-2009-0365
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared…