Red Hat Security AdvisoryRHSA-2009:0361
NetworkManager security update
Released 2009-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) NetworkManager-1:0.7.0-4.el5_3, NetworkManager-1:0.7.0-4.el5_3.i386, NetworkManager-1:0.7.0-4.el5_3.ia64 +17
- Red Hat Enterprise Linux Desktop (v. 5 client) NetworkManager-1:0.7.0-4.el5_3, NetworkManager-1:0.7.0-4.el5_3.i386, NetworkManager-glib-1:0.7.0-4.el5_3 +3
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) NetworkManager-1:0.7.0-4.el5_3, NetworkManager-devel-1:0.7.0-4.el5_3, NetworkManager-devel-1:0.7.0-4.el5_3.i386 +2
Fixes 2 records
Priority LOW 28
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecifie…
CVSS 2.0MEDIUM 6.2· Local · Low privileges · Interaction — · EPSS 0.00339 · Published 2009-03-05 · Fixed CWE-264
Priority LOW 23
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method…
CVSS 2.0MEDIUM 4.6· Local · Low privileges · Interaction — · EPSS 0.01094 · Published 2009-03-05 · Fixed CWE-264
