Unscored severity · published Dec 23, 2009
CVE-2009-4144
NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a…
–
CVSS
1.9%
EPSS
No
On KEV
Description
NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Networkmanager · Gnome
0.7.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4144
bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067
git.gnome.org
http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=4020594dfbf566f1852f0acb36ad631a9e73a82b
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
secunia.com
http://secunia.com/advisories/38420
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/12/16/3
www.redhat.com
http://www.redhat.com/support/errata/RHSA-2010-0108.html
More from Networkmanager
7.5
CVE-2018-1000135
GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local…
6.8
CVE-2006-7246
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used
5.5
CVE-2021-20297
A flaw was found in NetworkManager in versions before 1.30.0
5.5
CVE-2012-1096
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection
4.4
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network