CVE-2009-0578
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ...
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
Exploit likelihood
What each source reports
NVD Score used
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
CVE-2009-0578- CVSS 2.0
- 6.2 Medium
AV:L/AC:L/Au:S/C:N/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
CVE-2009-0578- Updated
- 2026-11-02
EUVDEUVD-2009-0582 No score
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
EUVD-2009-0582- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qphg-f927-gw8f No score
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and ...
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
GHSA-qphg-f927-gw8f- Updated
- 2026-11-02
OSV No score
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
CVE-2009-0578- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-0578 No score
GNOME NetworkManager before 0.7.0.99 does not properly verify privileges for dbus (1) modify and (2) delete requests, which allows local users to change or remove the network connections of arbitrary users via unspecified vectors related to org.freedesktop.NetworkManagerUserSettings and at_console.
- Record
DEBIAN-CVE-2009-0578- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
network-manager-appletDebian:12 |
before 0.7.0.99-1 | 0.7.0.99-1 |
network-manager-appletDebian:13 |
before 0.7.0.99-1 | 0.7.0.99-1 |
network-manager-appletDebian:14 |
before 0.7.0.99-1 | 0.7.0.99-1 |
NetworkManagerRed Hat:enterprise_linux:5::client_workstation |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-debuginfoRed Hat:enterprise_linux:5::client_workstation |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-develRed Hat:enterprise_linux:5::client_workstation |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-glib-develRed Hat:enterprise_linux:5::client_workstation |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManagerRed Hat:enterprise_linux:5::client |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-debuginfoRed Hat:enterprise_linux:5::client |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-glibRed Hat:enterprise_linux:5::client |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
Show 7 moreShow less
| Package | Affected | Fixed |
|---|---|---|
NetworkManager-gnomeRed Hat:enterprise_linux:5::client |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManagerRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-debuginfoRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-develRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-glibRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-glib-develRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
NetworkManager-gnomeRed Hat:enterprise_linux:5::server |
before 1:0.7.0-4.el5_3 | 1:0.7.0-4.el5_3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-0578 is a medium vulnerability (CVSS 6.2) in Ubuntu Linux, published March 5, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. Fixed in network-manager-applet 0.7.0.99-1.
References
ubuntu.com/usn/USN-727-1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8931
securityfocus.com/bid/33966
exchange.xforce.ibmcloud.com/vulnerabilities/49063
secunia.com/advisories/34067
bugzilla.redhat.com/show_bug.cgi?id=487752
Show 17 moreShow less
securitytracker.com/id?1021909
lists.opensuse.org/opensuse-security-announce/2009-04/msg00010.html
redhat.com/support/errata/RHSA-2009-0361.html
nvd.nist.gov/vuln/detail/CVE-2009-0578
github.com/advisories/GHSA-qphg-f927-gw8f
security-tracker.debian.org/tracker/CVE-2009-0578
access.redhat.com/errata/RHSA-2009:0361
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0361.json
cve.org/CVERecord?id=CVE-2009-0365