[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1955-1 network-manager/network-manager-applet -- information disclosure

ID: oval:org.secpod.oval:def:600309Date: (C)2011-05-13   (M)2022-10-10
Class: PATCHFamily: unix




It was discovered that network-manager-applet, a network management framework, lacks some dbus restriction rules, which allows local users to obtain sensitive information. If you have locally modified the /etc/dbus-1/system.d/nm-applet.conf file, then please make sure that you merge the changes from this fix when asked during upgrade. For the stable distribution , this problem has been fixed in version 0.6.6-4+lenny1 of network-manager-applet. For the oldstable distribution , this problem has been fixed in version 0.6.4-6+etch1 of network-manager. For the testing distribution and the unstable distribution , this problem has been fixed in version 0.7.0.99-1 of network-manager-applet. We recommend that you upgrade your network-manager and network-manager-applet packages accordingly.

Platform:
Debian 5.0
Debian 4.0
Product:
network-manager
network-manager-applet
Reference:
DSA-1955-1
CVE-2009-0365
CVE    1
CVE-2009-0365
CPE    2
cpe:/o:debian:debian_linux:4.x
cpe:/o:debian:debian_linux:5.x

© SecPod Technologies