NVD

Id
47697  
Name
CVE-2009-0365  
Description
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
3.1  
CVSS Vector
(AV:L/AC:L/Au:S/C:C/I:N/A:N)  
Pub Date
2017-01-07  
Published
2009-03-04  
Modified Date
2010-08-21  
Seq
2009-0365  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
239037 47697 CVE-2009-0365 SUSE-SA:2009:013  View
239038 47697 CVE-2009-0365 SUSE-SR:2009:009  View
239039 47697 CVE-2009-0365 oval:org.mitre.oval:def:10828  View
239040 47697 CVE-2009-0365 1021910  View
239041 47697 CVE-2009-0365 1021911  View
239042 47697 CVE-2009-0365 http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207  View
239043 47697 CVE-2009-0365 http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207  View
239044 47697 CVE-2009-0365 DSA-1955  View
239045 47697 CVE-2009-0365 RHSA-2009:0361  View
239046 47697 CVE-2009-0365 RHSA-2009:0362  View
239047 47697 CVE-2009-0365 33966  View
239048 47697 CVE-2009-0365 1021908  View
239049 47697 CVE-2009-0365 USN-727-1  View
239050 47697 CVE-2009-0365 USN-727-2  View
239051 47697 CVE-2009-0365 networkmanager-dbus-info-disclosure(49062)  View
239052 47697 CVE-2009-0365 https://bugzilla.redhat.com/show_bug.cgi?id=487722  View
239053 47697 CVE-2009-0365 https://bugzilla.redhat.com/show_bug.cgi?id=487752  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40498 JVNDB-2009-001504 Ubuntu の dbus リクエストハンドラにおけるネットワーク接続情報が漏えいする脆弱性 Ubuntu の (1) network-manager-applet および (2) NetworkManager で利用されている dbus リクエストハンドラには、権限を適切に検証しないため、 (a) ネットワーク接続パスワードおよび (b) 事前共有キーが漏えいする脆弱性が存在します。 CVE-2009-0365 37796 CVE-2009-0365 47697 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001504.html 2009-03-05 2009-10-06 View