CVE-2009-0489
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon,...
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
Exploit likelihood
What each source reports
NVD Score used
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
- Record
CVE-2009-0489- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-16
- Updated
- 2026-11-02
CVE List No score
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
- Record
CVE-2009-0489- Updated
- 2026-11-02
EUVDEUVD-2009-0493 No score
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
- Record
EUVD-2009-0493- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qc2r-pgq6-m25v No score
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon,...
The DBus configuration file for Wicd before 1.5.9 allows arbitrary users to own org.wicd.daemon, which allows local users to receive messages that were intended for the Wicd daemon, possibly including credentials.
- Record
GHSA-qc2r-pgq6-m25v- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0489 is a low vulnerability (CVSS 2.1) in David Paleino Wicd, published February 9, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.33%, the 26th percentile. No source names a fixed version.
References
security.gentoo.org/glsa/glsa-200904-12.xml
secunia.com/advisories/34685
sourceforge.net/project/shownotes.php?group_id=194573&release_id=659059
openwall.com/lists/oss-security/2009/02/06/4
bazaar.launchpad.net/~wicd-devel/wicd/trunk/revision/222
nvd.nist.gov/vuln/detail/CVE-2009-0489
github.com/advisories/GHSA-qc2r-pgq6-m25v