CVEvulnerability
CVE-2009-0489
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2009-02-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-16
Description
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
Affected configurations
• david paleino wicd (<= 1.5.8)
• david paleino wicd 1.2.7
• david paleino wicd 1.3.1
• david paleino wicd 1.4.0
• david paleino wicd 1.4.1
• david paleino wicd 1.4.2
• david paleino wicd 1.5.0
• david paleino wicd 1.5.1
• david paleino wicd 1.5.2
• david paleino wicd 1.5.3
• david paleino wicd 1.5.4
• david paleino wicd 1.5.5
• david paleino wicd 1.5.6
• david paleino wicd 1.5.7
Related
Weakness · not in database (1)
References
- http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222 bazaar.launchpad.net
- http://secunia.com/advisories/33870 secunia.com
- http://secunia.com/advisories/34685 secunia.com
- http://security.gentoo.org/glsa/glsa-200904-12.xml security.gentoo.org
- http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059 sourceforge.net
- http://www.openwall.com/lists/oss-security/2009/02/06/4 www.openwall.com
- http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222 bazaar.launchpad.net
- http://secunia.com/advisories/33870 secunia.com
- http://secunia.com/advisories/34685 secunia.com
- http://security.gentoo.org/glsa/glsa-200904-12.xml security.gentoo.org
- http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059 sourceforge.net
- http://www.openwall.com/lists/oss-security/2009/02/06/4 www.openwall.com