Wicd: Multiple vulnerabilities
Gentoo Linux Security Advisory
||GLSA 201206-08 / wicd
||June 21, 2012
||June 21, 2012: 1
All supported architectures
Multiple vulnerabilities have been found in Wicd, the worst of
which might allow execution of arbitrary code as root.
Wicd is an open source wired and wireless network manager for Linux.
Two vulnerabilities have been found in Wicd:
- Passwords and passphrases are written to /var/log/wicd
- Input from the daemon's D-Bus interface is not properly sanitized
A local attacker could gain privileges of the root user or obtain
There is no known workaround at this time.
All Wicd users should upgrade to the latest version:
Code Listing 3.1: Resolution
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/wicd-184.108.40.206"