CVE-2011-2176: Low severity red hat networkmanager-libreswan-gnome vulnerability
GNOME NetworkManager before 0.8.6 does not properly enforce the authadmin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
Other sources
It was found that NetworkManager, a network devices and connections manager, did not properly enforce the PolicyKit 'authadmin' action element settings (did not require authentication by an administrative user), when the 'authadmin' element was specified in org.freedesktop.network-manager-settings.system.wifi.share.open (connection sharing via an open WiFi network) action. A local attacker could use this flaw to setup an unsecure (passwordless) Ad-Hoc wireless network.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2176?
CVE-2011-2176 is classified as a medium severity vulnerability allowing local users to bypass wireless network sharing restrictions.
How do I fix CVE-2011-2176?
To fix CVE-2011-2176, you should update NetworkManager to version 0.8.6 or later.
Which versions of NetworkManager are affected by CVE-2011-2176?
CVE-2011-2176 affects NetworkManager versions prior to 0.8.6, including multiple earlier versions.
What types of attacks does CVE-2011-2176 allow?
CVE-2011-2176 allows local users to potentially bypass intended wireless network sharing restrictions.
Is CVE-2011-2176 a remote or local vulnerability?
CVE-2011-2176 is a local vulnerability, meaning it can be exploited by users with access to the local system.