CVE-2009-0365

N/A Unknown

Published: March 05, 2009 Modified: April 23, 2026

Description

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html

Source: cve@mitre.org

http://secunia.com/advisories/34067

Source: cve@mitre.org

http://secunia.com/advisories/34177

Source: cve@mitre.org

http://secunia.com/advisories/34473

Source: cve@mitre.org

http://securitytracker.com/id?1021910

Source: cve@mitre.org

http://securitytracker.com/id?1021911

Source: cve@mitre.org

http://svn.gnome.org/viewvc/network-manager-applet/trunk/nm-applet.conf?r1=1133&r2=1207&pathrev=1207

Source: cve@mitre.org

http://svn.gnome.org/viewvc/network-manager-applet?view=revision&revision=1207

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1955

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0361.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2009-0362.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/33966

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1021908

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-727-1

Source: cve@mitre.org

Vendor Advisory

http://www.ubuntu.com/usn/USN-727-2

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=487722

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=487752

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/49062

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10828

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html