CVE-2009-0578 | BDVDB-2026-35389 Detail
Description#
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.ubuntu.com/usn/USN-727-1
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931
- http://www.securityfocus.com/bid/33966
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49063
- http://secunia.com/advisories/34067
- https://bugzilla.redhat.com/show_bug.cgi?id=487752
- http://www.securitytracker.com/id?1021909
- http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
- http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
- http://www.redhat.com/support/errata/RHSA-2009-0361.html
- http://secunia.com/advisories/34473
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.