Rapid7 Vulnerability & Exploit Database

ELSA-2009-0361 Moderate: Enterprise Linux NetworkManager security update

Free InsightVM Trial No credit card necessary

Watch Demo See how it all works

Back to Search

ELSA-2009-0361 Moderate: Enterprise Linux NetworkManager security update

Severity

CVSS

(AV:L/AC:L/Au:S/C:N/I:C/A:C)

Published

03/04/2009

Created

07/25/2018

Added

12/20/2011

Modified

07/04/2017

Description

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Solution(s)

oracle-linux-upgrade-networkmanager
oracle-linux-upgrade-networkmanager-devel
oracle-linux-upgrade-networkmanager-glib
oracle-linux-upgrade-networkmanager-glib-devel
oracle-linux-upgrade-networkmanager-gnome

References

https://attackerkb.com/topics/cve-2009-0365
33966
CVE - 2009-0365
CVE - 2009-0578
DSA-1955
OVAL10828
OVAL8931
RHSA-2009:0361
RHSA-2009:0362
SUSE-SA:2009:013
http://oss.oracle.com/pipermail/el-errata/2009-March/000932.html
49062
49063

Advanced vulnerability management analytics and reporting.

Key Features

Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;