CVE-2012-0813: Low severity wicd vulnerability
Published Jun 29, 2012
·Updated
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
Affected Software
21 affected components
David Paleino Wicd<=1.7.1
David Paleino Wicd=1.2.7
David Paleino Wicd=1.3.1
David Paleino Wicd=1.4.0
David Paleino Wicd=1.4.1
David Paleino Wicd=1.4.2
David Paleino Wicd=1.5.0
David Paleino Wicd=1.5.1
David Paleino Wicd=1.5.2
David Paleino Wicd=1.5.3
David Paleino Wicd=1.5.4
David Paleino Wicd=1.5.5
David Paleino Wicd=1.5.6
David Paleino Wicd=1.5.7
David Paleino Wicd=1.5.8
David Paleino Wicd=1.5.9
David Paleino Wicd=1.6.0
David Paleino Wicd=1.6.2
David Paleino Wicd=1.7.0
David Paleino Wicd=1.7.1
David Paleino Wicd=1.7.2
Event History
Jun 29, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0813?
CVE-2012-0813 is considered a medium severity vulnerability due to the exposure of sensitive information.
2
How do I fix CVE-2012-0813?
To fix CVE-2012-0813, upgrade Wicd to version 1.7.1 or later, which addresses this vulnerability.
3
What information is exposed by CVE-2012-0813?
CVE-2012-0813 exposes sensitive information, such as passwords, from log files located in /var/log/wicd.
4
Which versions of Wicd are affected by CVE-2012-0813?
Versions of Wicd prior to 1.7.1, including all versions between 1.2.7 and 1.7.0, are affected by CVE-2012-0813.
5
Can CVE-2012-0813 be exploited remotely?
CVE-2012-0813 may be exploited by context-dependent attackers who have access to the log files.