Ubuntu 883-1: network-manager-applet vulnerabilities

    Date13 Jan 2010
    CategoryUbuntu
    72
    Posted ByLinuxSecurity Advisories
    It was discovered that NetworkManager did not ensure that the Certification Authority (CA) certificate file remained present when using WPA Enterprise or 802.1x networks. A remote attacker could use this flaw to spoof the identity of a wireless network and view sensitive information. (CVE-2009-4144) [More...]
    ===========================================================
    Ubuntu Security Notice USN-883-1           January 13, 2010
    network-manager-applet vulnerabilities
    CVE-2009-4144, CVE-2009-4145
    ===========================================================
    
    A security issue affects the following Ubuntu releases:
    
    Ubuntu 8.10
    Ubuntu 9.04
    
    This advisory also applies to the corresponding versions of
    Kubuntu, Edubuntu, and Xubuntu.
    
    The problem can be corrected by upgrading your system to the
    following package versions:
    
    Ubuntu 8.10:
      network-manager-gnome           0.7~~svn20081020t000444-0ubuntu1.8.10.3
    
    Ubuntu 9.04:
      network-manager-gnome           0.7.1~rc4.1-0ubuntu2.1
    
    After a standard system upgrade you need to restart your session to effect
    the necessary changes.
    
    Details follow:
    
    It was discovered that NetworkManager did not ensure that the Certification
    Authority (CA) certificate file remained present when using WPA Enterprise
    or 802.1x networks. A remote attacker could use this flaw to spoof the
    identity of a wireless network and view sensitive information.
    (CVE-2009-4144)
    
    It was discovered that the connection editor GUI would incorrectly export
    objects over D-Bus. A local user could read D-Bus signals to view other
    users' network connection passwords and pre-shared keys. (CVE-2009-4145)
    
    
    Updated packages for Ubuntu 8.10:
    
      Source archives:
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7~~svn20081020t000444-0ubuntu1.8.10.3.diff.gz
          Size/MD5:    52472 b82ebcb1945e432b7141c51500cf54d0
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7~~svn20081020t000444-0ubuntu1.8.10.3.dsc
          Size/MD5:     1745 682f49446d481b1c47a9191a7e8863d0
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7~~svn20081020t000444.orig.tar.gz
          Size/MD5:   668729 af829714605058afb3cf77c5d419ae83
    
      amd64 architecture (Athlon64, Opteron, EM64T Xeon):
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-gnome_0.7~~svn20081020t000444-0ubuntu1.8.10.3_amd64.deb
          Size/MD5:   314590 93926fe52218799bb9582a9937625ebc
    
      i386 architecture (x86 compatible Intel/AMD):
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-gnome_0.7~~svn20081020t000444-0ubuntu1.8.10.3_i386.deb
          Size/MD5:   300692 e8130472fa267cd98d5696a660f7121b
    
      lpia architecture (Low Power Intel Architecture):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7~~svn20081020t000444-0ubuntu1.8.10.3_lpia.deb
          Size/MD5:   299180 9b9c2a8e5577ede2474873c864dfb620
    
      powerpc architecture (Apple Macintosh G3/G4/G5):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7~~svn20081020t000444-0ubuntu1.8.10.3_powerpc.deb
          Size/MD5:   310850 051260d8bf82146f1533e10ec842db46
    
      sparc architecture (Sun SPARC/UltraSPARC):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7~~svn20081020t000444-0ubuntu1.8.10.3_sparc.deb
          Size/MD5:   303226 0fcfffc3b7948a93d8c20a22a867b34e
    
    Updated packages for Ubuntu 9.04:
    
      Source archives:
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7.1~rc4.1-0ubuntu2.1.diff.gz
          Size/MD5:    39587 f761e8d9cbe68d5ff1a1ef1f373d0855
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7.1~rc4.1-0ubuntu2.1.dsc
          Size/MD5:     1621 83c06ab153587c3d3ece6ec8d27e8fa6
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-applet_0.7.1~rc4.1.orig.tar.gz
          Size/MD5:   812190 85177fb4f930e731187ad1f811f07888
    
      amd64 architecture (Athlon64, Opteron, EM64T Xeon):
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-gnome_0.7.1~rc4.1-0ubuntu2.1_amd64.deb
          Size/MD5:   381524 c8a4ece54773441228662a1d8f0b78c0
    
      i386 architecture (x86 compatible Intel/AMD):
    
        http://security.ubuntu.com/ubuntu/pool/main/n/network-manager-applet/network-manager-gnome_0.7.1~rc4.1-0ubuntu2.1_i386.deb
          Size/MD5:   365622 13d6469d61d2323a6813e2ef763eccb2
    
      lpia architecture (Low Power Intel Architecture):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7.1~rc4.1-0ubuntu2.1_lpia.deb
          Size/MD5:   362318 17f179f208b66b13320543e806f7aaed
    
      powerpc architecture (Apple Macintosh G3/G4/G5):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7.1~rc4.1-0ubuntu2.1_powerpc.deb
          Size/MD5:   375036 32034d9e9af5d92a8a8174a2684f1ce2
    
      sparc architecture (Sun SPARC/UltraSPARC):
    
        http://ports.ubuntu.com/pool/main/n/network-manager-applet/network-manager-gnome_0.7.1~rc4.1-0ubuntu2.1_sparc.deb
          Size/MD5:   368592 95d9b33243243701ecf97145d473043e
    
    
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"23","type":"x","order":"1","pct":53.49,"resources":[]},{"id":"88","title":"Should be more technical","votes":"5","type":"x","order":"2","pct":11.63,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"15","type":"x","order":"3","pct":34.88,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.