nm-applet.conf in GNOME NetworkManager before 0.7.0.99 contains an incorrect deny setting, which allows local users to discover (1) network connection passwords and (2) pre-shared keys via calls to the GetSecrets method in the dbus request handler.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubuntu_linux | Ubuntu | 6.06 (including) | 6.06 (including) |
| Ubuntu_linux | Ubuntu | 7.10 (including) | 7.10 (including) |
| Ubuntu_linux | Ubuntu | 8.04 (including) | 8.04 (including) |
| Ubuntu_linux | Ubuntu | 8.10 (including) | 8.10 (including) |
| Red Hat Enterprise Linux 4 | RedHat | NetworkManager-0:0.3.1-5.el4 | * |
| Red Hat Enterprise Linux 5 | RedHat | NetworkManager-1:0.7.0-4.el5_3 | * |
| Network-manager | Ubuntu | dapper | * |
| Network-manager | Ubuntu | intrepid | * |
| Network-manager-applet | Ubuntu | gutsy | * |
| Network-manager-applet | Ubuntu | hardy | * |
| Network-manager-applet | Ubuntu | intrepid | * |