2.1
CVE-2009-0489
- EPSS 0.33%
- Veröffentlicht 09.02.2009 20:30:02
- Zuletzt bearbeitet 16.06.2026 23:05:09
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
David Paleino ≫ Wicd Version <= 1.5.8
David Paleino ≫ Wicd Version1.2.7
David Paleino ≫ Wicd Version1.3.1
David Paleino ≫ Wicd Version1.4.0
David Paleino ≫ Wicd Version1.4.1
David Paleino ≫ Wicd Version1.4.2
David Paleino ≫ Wicd Version1.5.0
David Paleino ≫ Wicd Version1.5.1
David Paleino ≫ Wicd Version1.5.2
David Paleino ≫ Wicd Version1.5.3
David Paleino ≫ Wicd Version1.5.4
David Paleino ≫ Wicd Version1.5.5
David Paleino ≫ Wicd Version1.5.6
David Paleino ≫ Wicd Version1.5.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.33% | 0.245 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222
http://secunia.com/advisories/33870
http://secunia.com/advisories/34685
http://security.gentoo.org/glsa/glsa-200904-12.xml
http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059
http://www.openwall.com/lists/oss-security/2009/02/06/4