CVE-2009-4145
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2009-4145
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
nm-connection-editor in NetworkManager (NM) 0.7.x exports connection objects over D-Bus upon actions in the connection editor GUI, which allows local users to obtain sensitive information by reading D-Bus signals, as demonstrated by using dbus-monitor to discover the password for the WiFi network.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gnome NetworkManager nm-connection-editor D-Bus信号敏感信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetworkManager (NM)中的nm-connection-editor在连接编辑GUI中的操作中对D-Bus输出链接，本地用户可以借助读取D-Bus信号获得敏感信息，例如借助使用dbus-monitor发现WiFi网络系统的密码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2009-4145
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-4145
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=546117x_refsource_CONFIRM
- http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00000.htmlvendor-advisoryx_refsource_SUSE
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10539vdb-entrysignaturex_refsource_OVAL
- https://nvd.nist.gov/vuln/detail/CVE-2009-4145
Same Patch Batch · n/a · 2009-12-23 · 16 CVEs total
| CVE-2009-4405 | Trac文本格式报表信息泄露漏洞 | |
| CVE-2009-4406 | APC Switched Rack PDU 'login1' 跨站脚本漏洞 | |
| CVE-2009-4407 | PyForum 多个跨站脚本和请求伪造漏洞 | |
| CVE-2009-4408 | PyForum 'models.parser'多个跨站脚本漏洞 | |
| CVE-2009-4409 | SEIL/B1 PPP Access集中器验证绕过漏洞 | |
| CVE-2009-4144 | GNOME NetworkManager加密问题漏洞 | |
| CVE-2009-3580 | SQL-Ledger 跨站请求伪造漏洞 | |
| CVE-2009-3581 | SQL-Ledger 多个跨站脚本攻击漏洞 | |
| CVE-2009-3582 | SQL-Ledger 多个SQL输入漏洞 | |
| CVE-2009-3583 | SQL-Ledger Preferences的countrycode字段目录遍历攻击漏洞 | |
| CVE-2009-3584 | SQL-Ledger HTTP请求漏洞 | |
| CVE-2009-4133 | Condor管理任务安全绕过限制漏洞 | |
| CVE-2009-4402 | SQL-Ledger ERP配置错误漏洞 | |
| CVE-2009-4403 | Rumba XML 'index.php'跨站脚本攻击漏洞 | |
| CVE-2009-4404 | t-prot拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-4145
No comments yet