PT-2012-1132 · Wicd · Wicd

Vincent Lefevre · Published 2012-06-21 · Updated 2012-08-01 · CVE-2012-0813

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions wicd versions prior to 1.7.2.1

Description The issue concerns multiple vulnerabilities in the wicd package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited locally. Specifically, wicd saves sensitive information in log files in /var/log/wicd, allowing attackers to obtain passwords and other sensitive information.

Recommendations For versions prior to 1.7.2.1, update to version 1.7.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the log files in /var/log/wicd to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

BDU:2015-09660

CVE-2012-0813

Affected Products

Wicd

References · 11

• https://osv.dev/vulnerability/CVE-2012-0813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0813 · Security Note
• http://secunia.com/advisories/49657 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09660 · Security Note
• http://security.gentoo.org/glsa/glsa-201206-08.xml · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/01/26/13 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417 · Note
• http://securityfocus.com/bid/51703 · Note
• http://openwall.com/lists/oss-security/2012/01/26/14 · Note
• https://launchpad.net/wicd/+announcement/9570 · Note
• http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682 · Note