CVE-2009-0578 Missing authorization in n/a

What is CVE-2009-0578?

CVE-2009-0578 is a medium-severity missing authorization vulnerability in Ubuntu Ubuntu Linux, published on 5 Mar 2009. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Weakness: CWE-264

Which versions are affected by CVE-2009-0578?

It affects 1 product.

Products include Ubuntu Ubuntu Linux.

How do I fix CVE-2009-0578?

Upgrade to a fixed version.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2009-0578 being exploited?

There is no known exploitation of CVE-2009-0578 in the wild and no public exploit code.

Other vulnerabilities in Ubuntu Ubuntu Linux

• CVE-2010-0834 Auth bypass in n/a Critical 9.3
• CVE-2006-3597 Auth bypass in n/a High 7.2
• CVE-2006-3378 Privilege escalation in n/a High 7.2
• CVE-2006-1183 Information disclosure in n/a High 7.2
• CVE-2006-5648 Denial of service in n/a Medium 5.5

All Ubuntu Ubuntu Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2009-0578, GHSA-qphg-f927-gw8f.