Description
Wicd before 1.7.1 saves sensitive information in log files in /var/log/wicd, which allows context-dependent attackers to obtain passwords and other sensitive information.
References
- https://launchpad.net/wicd/+announcement/9570
- [oss-security] 20120126 Re: CVE request: wicd writes sensitive information in log files (password, passphrase...) mailing-list
- 51703 vdb-entry
- 49657 third-party-advisory
- http://bazaar.launchpad.net/~wicd-devel/wicd/experimental/revision/682
- [oss-security] 20120126 CVE request: wicd writes sensitive information in log files (password, passphrase...) mailing-list
- GLSA-201206-08 vendor-advisory
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=652417