CVE-2009-0365 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-0365 Interim 1 14 2023-05-16T01:24:06Z current 2021-05-30T12:45:46Z 2023-05-16T01:24:06Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-0365 nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html E-Mail link for SUSE-SA:2009:013 https://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html E-Mail link for SUSE-SR:2009:009 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SUSE Linux Enterprise Software Development Kit 11 SUSE Linux Enterprise Software Development Kit 11 SP4 NetworkManager NetworkManager-0.7.0.r4359-15.22.49 NetworkManager-0.7.0.r4359-15.9.2 NetworkManager-0.7.1_git20090811-3.20.5 NetworkManager-0.7.1_git20090811-3.28.2 NetworkManager-devel-0.7.1_git20090811-3.28.2 NetworkManager-glib-0.7.0.r4359-15.22.49 NetworkManager-glib-0.7.0.r4359-15.9.2 NetworkManager-glib-0.7.1_git20090811-3.20.5 NetworkManager-glib-0.7.1_git20090811-3.28.2 NetworkManager-gnome-0.7.0.r1053-11.16.61 NetworkManager-gnome-0.7.1-5.22.28 NetworkManager-0.7.0.r4359-15.9.2 as a component of SUSE Linux Enterprise Server 11 NetworkManager-glib-0.7.0.r4359-15.9.2 as a component of SUSE Linux Enterprise Server 11 NetworkManager-0.7.0.r4359-15.22.49 as a component of SUSE Linux Enterprise Server 11 SP1 NetworkManager-glib-0.7.0.r4359-15.22.49 as a component of SUSE Linux Enterprise Server 11 SP1 NetworkManager-gnome-0.7.0.r1053-11.16.61 as a component of SUSE Linux Enterprise Server 11 SP1 NetworkManager-0.7.1_git20090811-3.20.5 as a component of SUSE Linux Enterprise Server 11 SP2 NetworkManager-glib-0.7.1_git20090811-3.20.5 as a component of SUSE Linux Enterprise Server 11 SP2 NetworkManager-gnome-0.7.1-5.22.28 as a component of SUSE Linux Enterprise Server 11 SP2 NetworkManager-0.7.1_git20090811-3.28.2 as a component of SUSE Linux Enterprise Server 11 SP3 NetworkManager-glib-0.7.1_git20090811-3.28.2 as a component of SUSE Linux Enterprise Server 11 SP3 NetworkManager-gnome-0.7.1-5.22.28 as a component of SUSE Linux Enterprise Server 11 SP3 NetworkManager-0.7.1_git20090811-3.28.2 as a component of SUSE Linux Enterprise Server 11 SP4 NetworkManager-glib-0.7.1_git20090811-3.28.2 as a component of SUSE Linux Enterprise Server 11 SP4 NetworkManager-gnome-0.7.1-5.22.28 as a component of SUSE Linux Enterprise Server 11 SP4 NetworkManager-0.7.0.r4359-15.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 NetworkManager-glib-0.7.0.r4359-15.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 NetworkManager-devel-0.7.1_git20090811-3.28.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 NetworkManager as a component of SUSE Linux Enterprise Desktop 11 NetworkManager as a component of SUSE Linux Enterprise Server 11 NetworkManager as a component of SUSE Linux Enterprise Software Development Kit 11 nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler. CVE-2009-0365 SUSE Linux Enterprise Server 11:NetworkManager-0.7.0.r4359-15.9.2 SUSE Linux Enterprise Server 11:NetworkManager-glib-0.7.0.r4359-15.9.2 SUSE Linux Enterprise Server 11 SP1:NetworkManager-0.7.0.r4359-15.22.49 SUSE Linux Enterprise Server 11 SP1:NetworkManager-glib-0.7.0.r4359-15.22.49 SUSE Linux Enterprise Server 11 SP1:NetworkManager-gnome-0.7.0.r1053-11.16.61 SUSE Linux Enterprise Server 11 SP2:NetworkManager-0.7.1_git20090811-3.20.5 SUSE Linux Enterprise Server 11 SP2:NetworkManager-glib-0.7.1_git20090811-3.20.5 SUSE Linux Enterprise Server 11 SP2:NetworkManager-gnome-0.7.1-5.22.28 SUSE Linux Enterprise Server 11 SP3:NetworkManager-0.7.1_git20090811-3.28.2 SUSE Linux Enterprise Server 11 SP3:NetworkManager-glib-0.7.1_git20090811-3.28.2 SUSE Linux Enterprise Server 11 SP3:NetworkManager-gnome-0.7.1-5.22.28 SUSE Linux Enterprise Server 11 SP4:NetworkManager-0.7.1_git20090811-3.28.2 SUSE Linux Enterprise Server 11 SP4:NetworkManager-glib-0.7.1_git20090811-3.28.2 SUSE Linux Enterprise Server 11 SP4:NetworkManager-gnome-0.7.1-5.22.28 SUSE Linux Enterprise Server for SAP Applications 11:NetworkManager-0.7.0.r4359-15.9.2 SUSE Linux Enterprise Server for SAP Applications 11:NetworkManager-glib-0.7.0.r4359-15.9.2 SUSE Linux Enterprise Software Development Kit 11 SP4:NetworkManager-devel-0.7.1_git20090811-3.28.2 SUSE Linux Enterprise Desktop 11:NetworkManager SUSE Linux Enterprise Server 11:NetworkManager SUSE Linux Enterprise Software Development Kit 11:NetworkManager moderate 4.6 AV:L/AC:L/Au:S/C:C/I:N/A:N