Vulnerability DatabaseCVE-2012-2095
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2012-2095
Published:April 07, 2014
Updated:May 17, 2026
The SetWiredProperty function in the D-Bus interface in WICD before 1.7.2 allows local users to write arbitrary configuration settings and gain privileges via a crafted property name in a dbus message.
Related Resources (17)
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079055.html
http://www.openwall.com/lists/oss-security/2012/04/11/3
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079025.html
http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/751
http://www.securityfocus.com/bid/52987
http://www.exploit-db.com/exploits/18733
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668397
https://security-tracker.debian.org/tracker/CVE-2012-2095
https://people.canonical.com/~ubuntu-security/cve/CVE-2012-2095
http://www.infosecinstitute.com/courses/ethical-hacking-wicd-0day.html
http://secunia.com/advisories/48759
http://secunia.com/advisories/49657
https://bugs.launchpad.net/wicd/+bug/979221
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079029.html
https://launchpad.net/wicd/+announcement/9888
http://www.gentoo.org/security/en/glsa/glsa-201206-08.xml
http://www.openwall.com/lists/oss-security/2012/04/11/2
Do you need more information?
Contact Us
CVSS v3
Base Score:
7.4
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
CVSS v2
Base Score:
6.9
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
Weakness Type (CWE)
Improper Input Validation
CWE-20
EPSS
Base Score:
0.71