CVE-2012-0813 (GCVE-0-2012-0813)
Vulnerability from cvelistv5 – Published: 2012-06-29 19:00 – Updated: 2024-08-06 18:38
VLAI?
Summary
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
Severity ?
No CVSS data available.
CWE
- n/a
Assigner
References
| URL | Tags | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T18:38:14.777Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://launchpad.net/wicd/+announcement/9570"
},
{
"name": "[oss-security] 20120126 Re: CVE request: wicd writes sensitive information in log files (password, passphrase...)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/01/26/14"
},
{
"name": "51703",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/51703"
},
{
"name": "49657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/49657"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682"
},
{
"name": "[oss-security] 20120126 CVE request: wicd writes sensitive information in log files (password, passphrase...)",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2012/01/26/13"
},
{
"name": "GLSA-201206-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO",
"x_transferred"
],
"url": "http://security.gentoo.org/glsa/glsa-201206-08.xml"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2012-06-29T19:00:00Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://launchpad.net/wicd/+announcement/9570"
},
{
"name": "[oss-security] 20120126 Re: CVE request: wicd writes sensitive information in log files (password, passphrase...)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/01/26/14"
},
{
"name": "51703",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/51703"
},
{
"name": "49657",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/49657"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682"
},
{
"name": "[oss-security] 20120126 CVE request: wicd writes sensitive information in log files (password, passphrase...)",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2012/01/26/13"
},
{
"name": "GLSA-201206-08",
"tags": [
"vendor-advisory",
"x_refsource_GENTOO"
],
"url": "http://security.gentoo.org/glsa/glsa-201206-08.xml"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2012-0813",
"datePublished": "2012-06-29T19:00:00Z",
"dateReserved": "2012-01-19T00:00:00Z",
"dateUpdated": "2024-08-06T18:38:14.777Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2012-0813\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2012-06-29T19:55:02.577\",\"lastModified\":\"2025-04-11T00:51:21.963\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.\"},{\"lang\":\"es\",\"value\":\"Wicd anteriores a 1.7.1 guarda informaci\u00f3n confidencial en archivos de log en /var/log/wicd, lo que permite a atacantes dependientes del contexto obtener contrase\u00f1as y otra informaci\u00f3n confidencial.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:P/I:N/A:N\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-255\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:*:beta3:*:*:*:*:*:*\",\"versionEndIncluding\":\"1.7.1\",\"matchCriteriaId\":\"5405A668-8E9E-4E07-9281-C8AE1A9EB301\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.2.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"06AFC460-E683-4047-8C2A-1E9AC377917B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.3.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A2D411ED-67BF-45A0-BE8A-E981CAB0F4CD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.4.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45632B83-B5C7-42AC-9B8B-031AB0D6417A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.4.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"52DCBA8B-FD94-4184-985A-E054DEC04671\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.4.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F48E42D-AEEA-41EC-BCFB-5581CEA05B58\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"288E7A59-D1BA-45D7-A30A-9F5F56E5A192\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2265EFEA-CEF9-42E0-A538-8D8FAE5F351C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7769F3E0-EF1A-480C-845E-7178F2939ECD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.3:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22A39899-C5D7-47D0-9B9C-6ADD1F756B46\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.4:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"27ED667E-BD1E-4352-A5F0-DB70B86D600D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"84B74048-746F-4DF7-913D-3F0163FC8FD1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.6:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F9E268AD-D2A5-48DD-A311-6C2CD8A67149\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.7:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D5FE6B55-58EA-403E-AA60-2079A559D2CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.8:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D05918F4-2957-459D-9505-1B14B7C4D257\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.5.9:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7A7BD785-94DC-4525-9CA4-9DE41F316807\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.6.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2FCF612E-89BE-4AFC-8DC3-D8DE1452BFAD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.6.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1DF97412-C3F2-4AE2-B2CE-CE8F24EC139F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.7.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"40BD3EF9-EE76-4E63-B057-4B369BB39568\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.7.1:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"94373C23-875A-4CED-BC07-0AEFF233A64F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:david_paleino:wicd:1.7.2:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6D324009-C5BE-4BBD-82B7-1B9041416B56\"}]}]}],\"references\":[{\"url\":\"http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://secunia.com/advisories/49657\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201206-08.xml\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/01/26/13\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/01/26/14\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://www.securityfocus.com/bid/51703\",\"source\":\"secalert@redhat.com\"},{\"url\":\"https://launchpad.net/wicd/+announcement/9570\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://secunia.com/advisories/49657\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"http://security.gentoo.org/glsa/glsa-201206-08.xml\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/01/26/13\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.openwall.com/lists/oss-security/2012/01/26/14\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/51703\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://launchpad.net/wicd/+announcement/9570\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"}]}}"
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…