CVE catalog

CVE-2009-0578

network-manager-applet: CVE-2009-0578

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
0.34% · Oct 25, 2026

GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiannetwork-manager-appletsid1.36.0-5fixed
Debiannetwork-manager-appletforky1.36.0-5fixed
Debiannetwork-manager-applettrixie1.36.0-3fixed
Debiannetwork-manager-appletbookworm1.30.0-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiannetwork-manager-appletsourcesid0.7.0.99-1mediumNot reported[519801]
Debiannetwork-manager-appletsourceforky0.7.0.99-1mediumNot reported[519801]
Debiannetwork-manager-appletsourcetrixie0.7.0.99-1mediumNot reported[519801]
Debiannetwork-manager-appletsourcebookworm0.7.0.99-1mediumNot reported[519801]

[Debian bug #519801]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [network-manager-gnome]Fixed

    Source package: [network-manager-applet]

    Details (2)

    • 1.30.0-2 · amd64 · bookworm

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · bookworm; dsa · network-manager-applet · debian · 12

    • 1.30.0-2 · arm64 · bookworm

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · bookworm; dsa · network-manager-applet · debian · 12

[Debian 13 (Trixie)]

  • [network-manager-applet]Fixed
    Details (2)

    • 1.36.0-3 · arm64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

    • 1.36.0-3+b1 · amd64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

  • [network-manager-gnome]Fixed

    Source package: [network-manager-applet]

    Details (2)

    • 1.36.0-3 · arm64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

    • 1.36.0-3+b1 · amd64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

  • [nm-connection-editor]Fixed

    Source package: [network-manager-applet]

    Details (2)

    • 1.36.0-3 · arm64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

    • 1.36.0-3+b1 · amd64 · trixie

      Fixed · Fixed: 0.7.0.99-1

      dsa · network-manager-applet · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]