Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

wicd: privilege escalation

Package(s):

wicd/wicd

CVE #(s):

CVE-2009-0489

Created:

February 10, 2009

Updated:

April 10, 2009

Description:

From the CVE entry: The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.

Alerts:

Gentoo	200904-12	2009-04-10
Slackware	SSA:2009-040-01	2009-02-10

(Log in to post comments)