PT-2012-1132 · Wicd · Wicd

Vincent Lefevre

·

Publicado

2012-06-21

·

Atualizado

2012-08-01

·

CVE-2012-0813

CVSS v2.0

6.9

Média

VetorAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions wicd versions prior to 1.7.2.1
Description The issue concerns multiple vulnerabilities in the wicd package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally. Specifically, wicd saves sensitive information in log files in /var/log/wicd, allowing attackers to obtain passwords and other sensitive information.
Recommendations For versions prior to 1.7.2.1, update to version 1.7.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files in /var/log/wicd to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

BDU:2015-09660
CVE-2012-0813

Produtos afetados

Wicd