CVE-2009-0578
First published: Fri Feb 27 2009(Updated: )
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ubuntu | =8.10 | |
| Ubuntu Linux | =8.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ubuntu.com/usn/USN-727-1
- https://rhn.redhat.com/errata/RHSA-2009-0361.html
- http://rhn.redhat.com/errata/RHSA-2009-0361.html
- https://admin.fedoraproject.org/updates/F10/FEDORA-2009-2419
- https://admin.fedoraproject.org/updates/F9/FEDORA-2009-2420
- https://bugzilla.redhat.com/show_bug.cgi?id=487752
- http://www.securityfocus.com/bid/33966
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
- http://www.securitytracker.com/id?1021909
- http://www.redhat.com/support/errata/RHSA-2009-0361.html
- http://secunia.com/advisories/34473
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
- http://secunia.com/advisories/34067
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49063
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931
Frequently Asked Questions
What is the severity of CVE-2009-0578?
CVE-2009-0578 is classified as a moderate severity vulnerability.
How do I fix CVE-2009-0578?
To fix CVE-2009-0578, update GNOME NetworkManager to version 0.7.0.99 or later.
What systems are affected by CVE-2009-0578?
CVE-2009-0578 affects GNOME NetworkManager versions prior to 0.7.0.99 on Ubuntu Linux 8.10.
What kind of attack does CVE-2009-0578 enable?
CVE-2009-0578 allows local users to change or remove the network connections of arbitrary users.
When was CVE-2009-0578 reported?
CVE-2009-0578 was reported in January 2009.
- collector/redhat-bugzilla
- alias/CVE-2009-0578
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/event
- collector/nvd-historical
- agent/software-canonical-lookup-request
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- vendor/ubuntu
- canonical/ubuntu
- version/ubuntu/8.10
- canonical/ubuntu linux
- version/ubuntu linux/8.10