[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 9 Feb 2009 14:53:07 -0500 (EST)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request - Wicd <= 1.5.8
======================================================
Name: CVE-2009-0489
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0489
Reference: MLIST:[oss-security] 20090206 CVE Request - Wicd <= 1.5.8
Reference: URL:http://www.openwall.com/lists/oss-security/2009/02/06/4
Reference: CONFIRM:http://sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059
Reference: CONFIRM:http://bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222
The DBus configuration file for Wicd before 1.5.9 allows arbitrary
users to own org.wicd.daemon, which allows local users to receive
messages that were intended for the Wicd daemon, possibly including
credentials.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
