CVE-2012-2095 The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message...
MediumCVSS 6.9
EPSS 0.80%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/wicd(Debian:10) | < 1.7.2.4-1 | 1.7.2.4-1 |
| david paleino wicd | <= 1.7.1 | No fix listed |
| david paleino wicd | = 1.2.7 | No fix listed |
| david paleino wicd | = 1.3.1 | No fix listed |
| david paleino wicd | = 1.4.0 | No fix listed |
| david paleino wicd | = 1.4.1 | No fix listed |
| david paleino wicd | = 1.4.2 | No fix listed |
| david paleino wicd | = 1.5.0 | No fix listed |
| david paleino wicd | = 1.5.1 | No fix listed |
| david paleino wicd | = 1.5.2 | No fix listed |
| david paleino wicd | = 1.5.3 | No fix listed |
| david paleino wicd | = 1.5.4 | No fix listed |
| david paleino wicd | = 1.5.5 | No fix listed |
| david paleino wicd | = 1.5.6 | No fix listed |
| david paleino wicd | = 1.5.7 | No fix listed |
| david paleino wicd | = 1.5.8 | No fix listed |
| david paleino wicd | = 1.5.9 | No fix listed |
| david paleino wicd | = 1.6.0 | No fix listed |
| david paleino wicd | = 1.6.2 | No fix listed |
| david paleino wicd | = 1.7.0 | No fix listed |
| david paleino wicd | = 1.7.1-beta3 | No fix listed |
| fedoraproject fedora | = 15 | No fix listed |
| fedoraproject fedora | = 16 | No fix listed |
| fedoraproject fedora | = 17 | No fix listed |
References
- 48759 third-party-advisory vendor-advisory
- 49657 third-party-advisory vendor-advisory
- 18733 exploit
- bazaar.launchpad.net
- bugs.debian.org
- FEDORA-2012-5858 vendor-advisory
- FEDORA-2012-5923 vendor-advisory
- FEDORA-2012-5909 vendor-advisory
- GLSA-201206-08 vendor-advisory
- www.infosecinstitute.com
- [oss-security] 20120411 CVE id request: wicd mailing-list
- [oss-security] 20120411 Re: CVE id request: wicd mailing-list
- 52987 vdb-entry
- bugs.launchpad.net
- launchpad.net