Issued:
2009-03-25
Updated:
2009-03-25

RHSA-2009:0361 - Security Advisory

Synopsis

Moderate: NetworkManager security update

Type/Severity

Security Advisory: Moderate

Topic

Updated NetworkManager packages that fix two security issues are now
available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

NetworkManager is a network link manager that attempts to keep a wired or
wireless network connection active at all times.

An information disclosure flaw was found in NetworkManager's D-Bus
interface. A local attacker could leverage this flaw to discover sensitive
information, such as network connection passwords and pre-shared keys.
(CVE-2009-0365)

A potential denial of service flaw was found in NetworkManager's D-Bus
interface. A local user could leverage this flaw to modify local connection
settings, preventing the system's network connection from functioning
properly. (CVE-2009-0578)

Red Hat would like to thank Ludwig Nussel for reporting these flaws
responsibly.

Users of NetworkManager should upgrade to these updated packages which
contain backported patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - AUS 5.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.3 ia64
  • Red Hat Enterprise Linux Server - AUS 5.3 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

  • BZ - 487722 - CVE-2009-0365 NetworkManager: GetSecrets disclosure
  • BZ - 487752 - CVE-2009-0578 NetworkManager: local users can modify the connection settings

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
NetworkManager-0.7.0-4.el5_3.src.rpm SHA-256: 1376cd96c745f79dd8ae20a0645ca28e6ad9a3054cc39db21f129ffc2ff3137c
x86_64
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-0.7.0-4.el5_3.x86_64.rpm SHA-256: 040b8ca9d69199c900c7c3e30f318f3536a9aec404b6c5961b1f5f43227d2848
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: e949b0f89a061fc24f2dba5e042b047ee3bd519230f4a1989353dbbd31cc273f
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-0.7.0-4.el5_3.x86_64.rpm SHA-256: 9ba7d18a3498cadb9b4e2b55bba43d3be7f51eb1980bf07fe231dc7c3b2af40c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-glib-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: 553f9debd2bdf94b0540ff5484ce7bef4434ec5e412c6285d95618eb6a59e72c
NetworkManager-gnome-0.7.0-4.el5_3.x86_64.rpm SHA-256: ec2e48ee51930c18cc899cf0b584ae106202a3662c7dd343f4cce7a97175f57b
ia64
NetworkManager-0.7.0-4.el5_3.ia64.rpm SHA-256: 44891e24df08338483f91eb8cdbcfba33661333e3ae2eb2e199cbbebb7c13c2a
NetworkManager-devel-0.7.0-4.el5_3.ia64.rpm SHA-256: 8686597b86915aeeac32f257af70752fedf10351187cd0084ec0a603f13437b0
NetworkManager-glib-0.7.0-4.el5_3.ia64.rpm SHA-256: e9d0c517e0dea1942e638727c10cff4573b18e4d0d7a9ee47e958d51bdf313e0
NetworkManager-glib-devel-0.7.0-4.el5_3.ia64.rpm SHA-256: 6dd37837c7c54e8d34ca54a4eafe8ee5feb0283c1e028e452e47689319a4a83d
NetworkManager-gnome-0.7.0-4.el5_3.ia64.rpm SHA-256: bee06c8a8c2a3a793f33adc452a9f8f99182ffe52abeba4574c96722e13b7157
i386
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-gnome-0.7.0-4.el5_3.i386.rpm SHA-256: 1827acdda56faac550974e96541155218ef736539931be369ccba671fa9f984c

Red Hat Enterprise Linux Workstation 5

SRPM
NetworkManager-0.7.0-4.el5_3.src.rpm SHA-256: 1376cd96c745f79dd8ae20a0645ca28e6ad9a3054cc39db21f129ffc2ff3137c
x86_64
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-0.7.0-4.el5_3.x86_64.rpm SHA-256: 040b8ca9d69199c900c7c3e30f318f3536a9aec404b6c5961b1f5f43227d2848
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: e949b0f89a061fc24f2dba5e042b047ee3bd519230f4a1989353dbbd31cc273f
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-0.7.0-4.el5_3.x86_64.rpm SHA-256: 9ba7d18a3498cadb9b4e2b55bba43d3be7f51eb1980bf07fe231dc7c3b2af40c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-glib-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: 553f9debd2bdf94b0540ff5484ce7bef4434ec5e412c6285d95618eb6a59e72c
NetworkManager-gnome-0.7.0-4.el5_3.x86_64.rpm SHA-256: ec2e48ee51930c18cc899cf0b584ae106202a3662c7dd343f4cce7a97175f57b
i386
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-gnome-0.7.0-4.el5_3.i386.rpm SHA-256: 1827acdda56faac550974e96541155218ef736539931be369ccba671fa9f984c

Red Hat Enterprise Linux Desktop 5

SRPM
NetworkManager-0.7.0-4.el5_3.src.rpm SHA-256: 1376cd96c745f79dd8ae20a0645ca28e6ad9a3054cc39db21f129ffc2ff3137c
x86_64
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-0.7.0-4.el5_3.x86_64.rpm SHA-256: 040b8ca9d69199c900c7c3e30f318f3536a9aec404b6c5961b1f5f43227d2848
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-0.7.0-4.el5_3.x86_64.rpm SHA-256: 9ba7d18a3498cadb9b4e2b55bba43d3be7f51eb1980bf07fe231dc7c3b2af40c
NetworkManager-gnome-0.7.0-4.el5_3.x86_64.rpm SHA-256: ec2e48ee51930c18cc899cf0b584ae106202a3662c7dd343f4cce7a97175f57b
i386
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-gnome-0.7.0-4.el5_3.i386.rpm SHA-256: 1827acdda56faac550974e96541155218ef736539931be369ccba671fa9f984c

Red Hat Enterprise Linux for Power, big endian 5

SRPM
NetworkManager-0.7.0-4.el5_3.src.rpm SHA-256: 1376cd96c745f79dd8ae20a0645ca28e6ad9a3054cc39db21f129ffc2ff3137c
ppc
NetworkManager-0.7.0-4.el5_3.ppc.rpm SHA-256: ed9b44bef80501e7deade78fba7bafbc41d963e93b0d5c1041a016e8b9cc4bfb
NetworkManager-0.7.0-4.el5_3.ppc64.rpm SHA-256: a60fcbcae1c16c989eaee00e5610d7dc36385d7a0ccaf991065b62b641735e31
NetworkManager-devel-0.7.0-4.el5_3.ppc.rpm SHA-256: e51a80df0f7dcffb817b595fb9ce24644986f4fb0e95fc676d3054ba6be841f0
NetworkManager-devel-0.7.0-4.el5_3.ppc64.rpm SHA-256: e575861da6d77181756aba1ab346bdf9fa5a92c540fd33e609f0c1131b80cab1
NetworkManager-glib-0.7.0-4.el5_3.ppc.rpm SHA-256: fa77740ec5c34f18c89a9e5402f5a1a5ebbc778a5a056014b70d729053eb9dc9
NetworkManager-glib-0.7.0-4.el5_3.ppc64.rpm SHA-256: 62f9dc0838c565650e5823c081a7b8cec12edd6cdbabbc632b9002b40196c5b7
NetworkManager-glib-devel-0.7.0-4.el5_3.ppc.rpm SHA-256: 22cc73ec75c388cea50b469f96937543899631316e60476a580c0208e040764f
NetworkManager-glib-devel-0.7.0-4.el5_3.ppc64.rpm SHA-256: 018a96432cb88fb8b93d01829f6839123540bd3cfa0fe58e671e5201346ea654
NetworkManager-gnome-0.7.0-4.el5_3.ppc.rpm SHA-256: 796819f7d3ec7e1977403dfffafd4b21e650463a70fba4fdef7a22257d8cb6ac

Red Hat Enterprise Linux Server from RHUI 5

SRPM
NetworkManager-0.7.0-4.el5_3.src.rpm SHA-256: 1376cd96c745f79dd8ae20a0645ca28e6ad9a3054cc39db21f129ffc2ff3137c
x86_64
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-0.7.0-4.el5_3.x86_64.rpm SHA-256: 040b8ca9d69199c900c7c3e30f318f3536a9aec404b6c5961b1f5f43227d2848
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: e949b0f89a061fc24f2dba5e042b047ee3bd519230f4a1989353dbbd31cc273f
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-0.7.0-4.el5_3.x86_64.rpm SHA-256: 9ba7d18a3498cadb9b4e2b55bba43d3be7f51eb1980bf07fe231dc7c3b2af40c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-glib-devel-0.7.0-4.el5_3.x86_64.rpm SHA-256: 553f9debd2bdf94b0540ff5484ce7bef4434ec5e412c6285d95618eb6a59e72c
NetworkManager-gnome-0.7.0-4.el5_3.x86_64.rpm SHA-256: ec2e48ee51930c18cc899cf0b584ae106202a3662c7dd343f4cce7a97175f57b
i386
NetworkManager-0.7.0-4.el5_3.i386.rpm SHA-256: e47e55ec1eb07677ea7115052930b080506d6e4f5b4aa0ba18a021da90125cba
NetworkManager-devel-0.7.0-4.el5_3.i386.rpm SHA-256: 6eafff5bc4590013fc05be1ee2fe31cc7c862c16994e08cfd725a7c7868e6d5d
NetworkManager-glib-0.7.0-4.el5_3.i386.rpm SHA-256: e61a7ef93dcc9979da95f845bdad82440d1eb24b1e9bbd5fedd1004873b8864c
NetworkManager-glib-devel-0.7.0-4.el5_3.i386.rpm SHA-256: abad7db4ad4567810c9232e7bc9b8b754bf25b45f0df4663db832063e376d2c9
NetworkManager-gnome-0.7.0-4.el5_3.i386.rpm SHA-256: 1827acdda56faac550974e96541155218ef736539931be369ccba671fa9f984c

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.