CVE-2009-0578

Severity: medium (CVSS 6.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-05 · updated 2026-06-16
Weakness: CWE-264

Description

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Affected products

Ubuntu Linux: 8.10

References

http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html
http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
http://secunia.com/advisories/34067
http://secunia.com/advisories/34473
http://www.redhat.com/support/errata/RHSA-2009-0361.html
http://www.securityfocus.com/bid/33966
http://www.securitytracker.com/id?1021909
http://www.ubuntu.com/usn/USN-727-1
https://bugzilla.redhat.com/show_bug.cgi?id=487752
https://exchange.xforce.ibmcloud.com/vulnerabilities/49063
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931
http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00003.html

Get alerted when CVE-2009-0578 or the next vulnerability affects your stack