CVE-2009-4144
CVE-2009-4144
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
NetworkManager (NM) 0.7.2 does not ensure that the configured Certification Authority (CA) certificate file for a (1) WPA Enterprise or (2) 802.1x network remains present upon a connection attempt, which might allow remote attackers to obtain sensitive information or cause a denial of service (connectivity disruption) by spoofing the identity of a wireless network.
EPSS 1,9% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
network-manager-applet Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.7.2-2
Actualiza a 0.7.2-2
network-manager-applet Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.7.2-2
Actualiza a 0.7.2-2
network-manager-applet Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 0.7.2-2
Actualiza a 0.7.2-2
Fuentes originales
- http://www.securityfocus.com/bid/37580
- http://www.openwall.com/lists/oss-security/2009/12/16/3
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560067
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.html
- http://www.redhat.com/support/errata/RHSA-2010-0108.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11315
- http://secunia.com/advisories/38420
- http://git.gnome.org/browse/network-manager-applet/commit/?h=NETWORKMANAGER_APPLET_0_7&id=4020594dfbf566f1852f0acb36ad631a9e73a82b
- https://bugzilla.redhat.com/show_bug.cgi?id=546795
- https://nvd.nist.gov/vuln/detail/CVE-2009-4144