CVE-2009-0578
First published: Fri Feb 27 2009(Updated: )
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu Ubuntu Linux | =8.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ubuntu.com/usn/USN-727-1
- http://www.securityfocus.com/bid/33966
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
- http://www.securitytracker.com/id?1021909
- http://www.redhat.com/support/errata/RHSA-2009-0361.html
- https://bugzilla.redhat.com/show_bug.cgi?id=487752
- http://secunia.com/advisories/34473
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
- http://secunia.com/advisories/34067
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49063
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931
- https://rhn.redhat.com/errata/RHSA-2009-0361.html
- http://rhn.redhat.com/errata/RHSA-2009-0361.html
- https://admin.fedoraproject.org/updates/F10/FEDORA-2009-2419
- https://admin.fedoraproject.org/updates/F9/FEDORA-2009-2420
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-historical
- collector/nvd-index
- collector/redhat-bugzilla
- alias/CVE-2009-0578
- vendor/ubuntu
- canonical/ubuntu ubuntu linux
- version/ubuntu ubuntu linux/8.10