CVE-2009-0578

Loading...

General

Score:6.2/10.0
Severity:Medium
Category:Access Control Error
Exploit:Available

Impact Metrics

Confidentiality:None
Integrity:Complete
Availability:Complete

Exploitability Metrics

Access Vector:Local
Access Complexity:Low
Authentication:Single

Relative vulnerabilities

CVE-2009-0365, CVE-2010-1172, CVE-2011-1943, CVE-2011-2176, CVE-2011-3364, CVE-2015-2924

Published on 05/03/09 - Updated on 29/09/17

Description

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2009-0578
CentOS CESA-2009:0361
Oracle Linux ELSA-2017-2299
Redhat RHSA-2009:0361

Exploits

SecurityFocusBID-33966

Relative technologies

VendorProduct
ubuntuubuntu_linux

Share this vulnerability with:

Twitter Facebook LinkedIn Mail