CVE-2009-0365: Ubuntu Linux

Medium severity, CVSS 4.6. EPSS: 0.9% chance of exploitation in the next 30 days.

nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.

Affected products

• Ubuntu Ubuntu Linux: version 6.06 only; version 7.10 only; version 8.04 only; version 8.10 only

Published 2009-03-05. Last modified 2026-06-16.