CVE-2012-0813 Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
LowCVSS 2.1
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wicd(Debian:10) | < 1.7.1~b3-4 | 1.7.1~b3-4 |
| david paleino wicd | <= 1.7.1 | No fix listed |
| david paleino wicd | = 1.2.7 | No fix listed |
| david paleino wicd | = 1.3.1 | No fix listed |
| david paleino wicd | = 1.4.0 | No fix listed |
| david paleino wicd | = 1.4.1 | No fix listed |
| david paleino wicd | = 1.4.2 | No fix listed |
| david paleino wicd | = 1.5.0 | No fix listed |
| david paleino wicd | = 1.5.1 | No fix listed |
| david paleino wicd | = 1.5.2 | No fix listed |
| david paleino wicd | = 1.5.3 | No fix listed |
| david paleino wicd | = 1.5.4 | No fix listed |
| david paleino wicd | = 1.5.5 | No fix listed |
| david paleino wicd | = 1.5.6 | No fix listed |
| david paleino wicd | = 1.5.7 | No fix listed |
| david paleino wicd | = 1.5.8 | No fix listed |
| david paleino wicd | = 1.5.9 | No fix listed |
| david paleino wicd | = 1.6.0 | No fix listed |
| david paleino wicd | = 1.6.2 | No fix listed |
| david paleino wicd | = 1.7.0 | No fix listed |
| david paleino wicd | = 1.7.1 | No fix listed |
| david paleino wicd | = 1.7.2 | No fix listed |
References
- 49657 third-party-advisory vendor-advisory
- GLSA-201206-08 vendor-advisory
- bazaar.launchpad.net
- bugs.debian.org
- [oss-security] 20120126 CVE request: wicd writes sensitive information in log files (password, passphrase...) mailing-list
- [oss-security] 20120126 Re: CVE request: wicd writes sensitive information in log files (password, passphrase...) mailing-list
- 51703 vdb-entry
- launchpad.net