Red Hat Security AdvisoryRHSA-2009:0362
NetworkManager security update
Released 2009-03-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 NetworkManager-0.3.1-5.el4, NetworkManager-0.3.1-5.el4.i386, NetworkManager-0.3.1-5.el4.ia64 +5
- Red Hat Enterprise Linux Desktop version 4 NetworkManager-0.3.1-5.el4, NetworkManager-0.3.1-5.el4.i386, NetworkManager-gnome-0.3.1-5.el4 +1
- Red Hat Enterprise Linux ES version 4 NetworkManager-0.3.1-5.el4, NetworkManager-0.3.1-5.el4.i386, NetworkManager-0.3.1-5.el4.ia64 +3
- Red Hat Enterprise Linux WS version 4 NetworkManager-0.3.1-5.el4, NetworkManager-0.3.1-5.el4.i386, NetworkManager-0.3.1-5.el4.ia64 +3
Fixes 1 record
Priority LOW 23
nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method…
CVSS 2.0MEDIUM 4.6· Local · Low privileges · Interaction — · EPSS 0.01094 · Published 2009-03-05 · Fixed CWE-264
