full-disclosure - [USN-727-2] NetworkManager vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Message-Id: <1236109572.6589.20.camel@mdlinux.technorage.com>
Date: Tue, 03 Mar 2009 14:46:12 -0500
From: Marc Deslauriers <marc.deslauriers@...onical.com>
To: ubuntu-security-announce@...ts.ubuntu.com
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: [USN-727-2] NetworkManager vulnerability

===========================================================
Ubuntu Security Notice USN-727-2             March 03, 2009
network-manager vulnerability
CVE-2009-0365
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
  network-manager-gnome           0.6.2-0ubuntu7.1

Ubuntu 8.10:
  network-manager                 0.7~~svn20081018t105859-0ubuntu1.8.10.2

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

USN-727-1 fixed vulnerabilities in network-manager-applet. This advisory
provides the corresponding updates for NetworkManager.

It was discovered that NetworkManager did not properly enforce permissions when
responding to dbus requests. A local user could perform dbus queries to view
system and user network connection passwords and pre-shared keys.


Updated packages for Ubuntu 6.06 LTS:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1.diff.gz
      Size/MD5:    34743 600cb7e8502953d66ee115db7f80e7e8
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1.dsc
      Size/MD5:     1055 c5fa9f57b9b4885fc22701b2a194d4ae
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2.orig.tar.gz
      Size/MD5:  1020184 dd5d54e70d34320d302366b74a46dbb2

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   121858 1091f4d13eb137d9642f869e948aa078
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0-dbg_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   127252 e57037d3d5e033c22acdf6790bd5a332
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   117516 5ad2a4f299e1e8817a8738185a2c017e
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dbg_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   383806 652ac19c650545cfacda8b8088288b08
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   105282 d76a91263f62e38d9cc491525bb92d6a
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome-dbg_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   315080 1b4411682db55d1ba47f89e359cf46d4
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   252418 ecd413af32b6ca0624977221b654537f
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   246526 c54e60f980ca55b3011db2a338bb76f4
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib-dev_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   111916 042e88f2641e83f128c46da7075163a8
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0-dbg_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   116148 ea0a66b60676105aadf9d02b98b421b9
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0_0.6.2-0ubuntu7.1_amd64.deb
      Size/MD5:   111194 619323f4f567215ef769b442f3017546

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   120794 e5509d2e13cf7d1c9bdcebafb106c25b
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0-dbg_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   120694 bf4587855de9b0583261fbac9dc7fcaf
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   116584 b1a080871e2e129d98eef605127ce204
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dbg_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   344318 ae65186e75641ebec2b727e94d30c7c2
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   105284 cc1442a71b1a094bc83da1cf5bab16c4
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome-dbg_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   287922 922c4210cbc75cd3bdb44ff0b3079114
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   240778 d2d4c1540a359fe98c1c7772b4c017c7
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   227720 4010298ffdebc042822509f15f0bb546
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib-dev_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   110910 e8c43189983fb32c8acf7f2d0d9fa14d
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0-dbg_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   114384 1ba62785c9140ecd3089b245d0810c6d
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0_0.6.2-0ubuntu7.1_i386.deb
      Size/MD5:   109904 66ee6b1be8fbd94e8efb2b7f107830a1

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   123122 1a6f1e635c3dc77cc22bdfd7bb60bc11
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0-dbg_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   127272 0210f69f718d82ece63aed25e74d402b
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   119154 88c0decef4748240a22b09154f141616
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dbg_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   379006 e2c84cd5f803d99f8d41c817375098c8
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   105290 c69253d41131324fa18f7e0e759d9202
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome-dbg_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   307174 adeffed37388baa98cdf56edbce1ed84
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   246574 e57477ee9b34ac26987b8ba70343f112
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   241916 f069122433b555d066510821cfcc0d0b
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib-dev_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   112090 03dbe4aaf71c5836296f627ae7bad604
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0-dbg_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   116776 efc5f6e58a3a479d0edc36b102e34e69
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0_0.6.2-0ubuntu7.1_powerpc.deb
      Size/MD5:   111912 c860c571d36875ff394d24a8ecbcb317

  sparc architecture (Sun SPARC/UltraSPARC):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   123078 189c7233442448f0b9d42f6ccc9d65a7
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0-dbg_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   122076 f7534c8a43b2b8b6b0b1125f60f70e52
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   118472 ea1c7f1bfc59384ce03875fe980b14dc
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dbg_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   340152 294d1c6ac8e1f96681b084c5ff4432ea
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   105284 e0a0e396ac51ca61d3a8d4009dbd8378
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome-dbg_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   286406 1515545d5f8479c2b4dd9a9781ca80bf
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-gnome_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   240640 53c83f717806730239346aadb092128c
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   230482 c2cd805ee8d49605628049cc2085a1cf
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib-dev_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   111890 be5c94248904858e4d02c941c1419b7c
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0-dbg_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   114498 5a5b1e42901b5b48d5ea9add28420f57
    http://security.ubuntu.com/ubuntu/pool/universe/n/network-manager/libnm-glib0_0.6.2-0ubuntu7.1_sparc.deb
      Size/MD5:   110476 cb0ad802dcfd9293220d86884e00b45a

Updated packages for Ubuntu 8.10:

  Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2.diff.gz
      Size/MD5:    53080 0f19cb4cbb0bfdab4ca52e9b9c73cb12
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2.dsc
      Size/MD5:     1844 0f0437a7643d7d9666a98b34eb1c6948
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859.orig.tar.gz
      Size/MD5:  1212180 69beaf9748236aa52b10171260089eab

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-glib-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:   112584 830c5716079c81073e010497412b2d48
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-glib0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:    62498 611af9f6d4c3e2b0d785a777bb30e149
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:    77692 591bd10891213c11296705dbc1e73d0b
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:    77264 2821140fb2f561650962866e147ecf1b
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:     6356 6850c4113c56037851a42e6b706dd7d8
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_amd64.deb
      Size/MD5:   290368 cb39ed7239bece30200f13f4d7300ca6

  i386 architecture (x86 compatible Intel/AMD):

    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-glib-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:    98336 be6f99056369a30d57df9ff0240eeef5
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-glib0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:    55008 a869f6812bc638821d11a3cc044fec2f
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:    66950 bfa354627928981f817742918735918e
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/libnm-util0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:    72056 b2093f43d1ce34cc3e5624e602d321c3
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:     6354 fe0716a4d4bcbbc03b2fd8acc06e913e
    http://security.ubuntu.com/ubuntu/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_i386.deb
      Size/MD5:   263832 54b49d875cbeadd055e4ee7a9ce9219a

  lpia architecture (Low Power Intel Architecture):

    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:    97636 bba139127632134dd61918e386cff27d
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:    52826 b52a1cf3fdfc5e7b2eefb4407eb768a1
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:    66264 39caaf9daa21e5941ed232caae184660
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:    70742 93cefabc57ba5a3253f5795e13023a9a
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:     6362 ef1f2fcb9de3a441faa97a496cdeeffe
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_lpia.deb
      Size/MD5:   259708 ab41d397cf87f04dca4631ba9570393a

  powerpc architecture (Apple Macintosh G3/G4/G5):

    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:   111880 719ce51233b96a89de6c55250a21a82b
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:    62218 ca9910877eddbc1aedc8c1c59ccc1fe8
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:    81850 2eddceb9dc6f356759bdc0989e02b9aa
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:    79320 46fc422fa935e1e608a34e0fd41691f2
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:     6358 ed0c910660a9f86bb9e33cc50bb76bf7
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_powerpc.deb
      Size/MD5:   297306 e787cc3e105e34a1a703f9323e712099

  sparc architecture (Sun SPARC/UltraSPARC):

    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:   104144 0c4f78e6bab71a11c1e1540266512169
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-glib0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:    56428 f368a9c8694eaaed9e91db1efec4ffb1
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:    72740 1567dfe6b161af503c63d0eef70c930c
    http://ports.ubuntu.com/pool/main/n/network-manager/libnm-util0_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:    73998 3473cc4be864c95a054bb7608c32d7a0
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager-dev_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:     6362 ad5c2d9d34043867d6407caac1731f87
    http://ports.ubuntu.com/pool/main/n/network-manager/network-manager_0.7~~svn20081018t105859-0ubuntu1.8.10.2_sparc.deb
      Size/MD5:   265632 b292daa57f5178e7a88651eb9e133d7a



Download attachment "signature.asc" of type "application/pgp-signature" (198 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/