Unscored severity · published Dec 23, 2009
CVE-2009-4145
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive…
–
CVSS
0.4%
EPSS
No
On KEV
Description
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Networkmanager · Gnome
0.7.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-4145
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-4145
Patch
http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=56d87fcb86acb5359558e0a2ee702cfc0c3391f2
Patch
http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=8627880e07c8345f69ed639325280c7f62a8f894
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
Vendor Advisory
http://secunia.com/advisories/37819
secunia.com
http://secunia.com/advisories/38420
www.openwall.com
http://www.openwall.com/lists/oss-security/2009/12/16/3
More from Networkmanager
7.5
CVE-2018-1000135
GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local…
6.8
CVE-2006-7246
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used
5.5
CVE-2021-20297
A flaw was found in NetworkManager in versions before 1.30.0
5.5
CVE-2012-1096
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection
4.4
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network