CVE-2009-0578

Published: Mar 5, 2009Modified: Apr 23, 2026

6.2

Vector

AV:L/AC:L/Au:S/C:N/I:C/A:C

Exploitability: 3.1 / Impact: 9.2

Source: NVD

Description

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Affected (1)

Products: Ubuntu: Ubuntu Linux

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ubuntu Ubuntu Linux	Version 8.10

Related CWEs

References (22)

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: secalert@redhat.com

http://secunia.com/advisories/34067

Source: secalert@redhat.com

http://secunia.com/advisories/34473

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2009-0361.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/33966

Source: secalert@redhat.com

http://www.securitytracker.com/id?1021909

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-727-1

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487752

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/49063

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34067

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34473

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2009-0361.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/33966

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1021909

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-727-1

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487752

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/49063

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.