Joined: 12 May 2004
|Posted: Thu Jun 21, 2012 12:26 pm Post subject: [ GLSA 201206-08 ] Wicd: Multiple vulnerabilities
|Gentoo Linux Security Advisory
Title: Wicd: Multiple vulnerabilities (GLSA 201206-08)
Date: June 21, 2012
Bug(s): #401005, #411729
Multiple vulnerabilities have been found in Wicd, the worst of
which might allow execution of arbitrary code as root.
Wicd is an open source wired and wireless network manager for Linux.
Vulnerable: < 18.104.22.168
Unaffected: >= 22.214.171.124
Architectures: All supported architectures
Two vulnerabilities have been found in Wicd:
- Passwords and passphrases are written to /var/log/wicd
- Input from the daemon's D-Bus interface is not properly sanitized
A local attacker could gain privileges of the root user or obtain
There is no known workaround at this time.
All Wicd users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/wicd-126.96.36.199"