CVE-2009-0489
Summary
| CVE | CVE-2009-0489 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-02-09 20:30:02 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials. |
Risk And Classification
CVSS v2.0 Breakdown
Access Vector
LocalAccess Complexity
LowAuthentication
NoneConfidentiality
PartialIntegrity
NoneAvailability
NoneAV:L/AC:L/Au:N/C:P/I:N/A:N
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | David Paleino | Wicd | 1.2.7 | All | All | All |
| Application | David Paleino | Wicd | 1.3.1 | All | All | All |
| Application | David Paleino | Wicd | 1.4.0 | All | All | All |
| Application | David Paleino | Wicd | 1.4.1 | All | All | All |
| Application | David Paleino | Wicd | 1.4.2 | All | All | All |
| Application | David Paleino | Wicd | 1.5.0 | All | All | All |
| Application | David Paleino | Wicd | 1.5.1 | All | All | All |
| Application | David Paleino | Wicd | 1.5.2 | All | All | All |
| Application | David Paleino | Wicd | 1.5.3 | All | All | All |
| Application | David Paleino | Wicd | 1.5.4 | All | All | All |
| Application | David Paleino | Wicd | 1.5.5 | All | All | All |
| Application | David Paleino | Wicd | 1.5.6 | All | All | All |
| Application | David Paleino | Wicd | 1.5.7 | All | All | All |
| Application | David Paleino | Wicd | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Gentoo Linux Documentation -- Wicd: Information disclosure | af854a3a-2127-422b-91ae-364da2661108 | security.gentoo.org | |
| Wicd D-Bus Configuration Information Disclosure Security Issue - Secunia Advisories - Vulnerability Intelligence - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| Not Found | af854a3a-2127-422b-91ae-364da2661108 | bazaar.launchpad.net | |
| Gentoo update for wicd - Secunia.com | af854a3a-2127-422b-91ae-364da2661108 | secunia.com | |
| SourceForge.net: wicd: Files | af854a3a-2127-422b-91ae-364da2661108 | sourceforge.net | |
| oss-security - CVE Request - Wicd <= 1.5.8 | af854a3a-2127-422b-91ae-364da2661108 | www.openwall.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.