CVE-2012-2095

Published: Apr 7, 2014Modified: May 6, 2026

6.9

Vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 3.4 / Impact: 10.0

Source: NVD

Description

The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.

Affected (23)

Products: David Paleino: Wicd · Fedoraproject: Fedora

1 product

1 product

Configuration A

23 vulnerable

Vulnerable Software	Affected Versions
David Paleino Wicd	Up to 1.7.1
David Paleino Wicd	Version 1.2.7
David Paleino Wicd	Version 1.3.1
David Paleino Wicd	Version 1.4.0
David Paleino Wicd	Version 1.4.1
David Paleino Wicd	Version 1.4.2
David Paleino Wicd	Version 1.5.0
David Paleino Wicd	Version 1.5.1
David Paleino Wicd	Version 1.5.2
David Paleino Wicd	Version 1.5.3
David Paleino Wicd	Version 1.5.4
David Paleino Wicd	Version 1.5.5
David Paleino Wicd	Version 1.5.6
David Paleino Wicd	Version 1.5.7
David Paleino Wicd	Version 1.5.8
David Paleino Wicd	Version 1.5.9
David Paleino Wicd	Version 1.6.0
David Paleino Wicd	Version 1.6.2
David Paleino Wicd	Version 1.7.0
David Paleino Wicd	Version 1.7.1 beta3
Fedoraproject Fedora	Version 15
Fedoraproject Fedora	Version 16
Fedoraproject Fedora	Version 17

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (30)

http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079029.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079055.html

Source: secalert@redhat.com

http://secunia.com/advisories/48759

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/49657

Source: secalert@redhat.com

Vendor Advisory

http://www.exploit-db.com/exploits/18733

Source: secalert@redhat.com

Exploit

http://www.gentoo.org/security/en/glsa/glsa-201206-08.xml

Source: secalert@redhat.com

http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/11/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/04/11/3

Source: secalert@redhat.com

http://www.securityfocus.com/bid/52987

Source: secalert@redhat.com

https://bugs.launchpad.net/wicd/+bug/979221

Source: secalert@redhat.com

https://launchpad.net/wicd/+announcement/9888

Source: secalert@redhat.com

http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079029.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079055.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/48759

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/49657

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.exploit-db.com/exploits/18733

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.gentoo.org/security/en/glsa/glsa-201206-08.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/04/11/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/04/11/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/52987

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.launchpad.net/wicd/+bug/979221

Source: af854a3a-2127-422b-91ae-364da2661108

https://launchpad.net/wicd/+announcement/9888

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.