CVE-2011-2176
First published: Wed Jun 01 2011(Updated: )
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NetworkManager | <=0.8.4 | |
| NetworkManager | =0.2.0 | |
| NetworkManager | =0.3.0 | |
| NetworkManager | =0.3.1 | |
| NetworkManager | =0.4.1 | |
| NetworkManager | =0.5.0 | |
| NetworkManager | =0.5.1 | |
| NetworkManager | =0.6.0 | |
| NetworkManager | =0.6.1 | |
| NetworkManager | =0.6.2 | |
| NetworkManager | =0.6.6 | |
| NetworkManager | =0.7.0 | |
| NetworkManager | =0.7.1 | |
| NetworkManager | =0.7.2 | |
| NetworkManager | =0.8.1 | |
| NetworkManager | =0.8.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063665.html
- https://bugzilla.redhat.com/show_bug.cgi?id=709662
- http://securitytracker.com/id?1025711
- http://www.redhat.com/support/errata/RHSA-2011-0930.html
- http://cgit.freedesktop.org/NetworkManager/NetworkManager/plain/NEWS?h=NM_0_8
- http://secunia.com/advisories/44858
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:171
- http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?h=wifi-share-auth&id=e7273c1609ac267e1d77ff03c97c8929f15e3737
- http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?h=wifi-share-auth&id=287fe10c40ae9b90ce703b79f3479b755f0956c0
- http://cgit.freedesktop.org/NetworkManager/NetworkManager/commit/?h=wifi-share-auth&id=e5085f950730b1e2e68645231e2042127c29a82e
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=715492
- https://rhn.redhat.com/errata/RHSA-2011-0930.html
Frequently Asked Questions
What is the severity of CVE-2011-2176?
CVE-2011-2176 is classified as a medium severity vulnerability allowing local users to bypass wireless network sharing restrictions.
How do I fix CVE-2011-2176?
To fix CVE-2011-2176, you should update NetworkManager to version 0.8.6 or later.
Which versions of NetworkManager are affected by CVE-2011-2176?
CVE-2011-2176 affects NetworkManager versions prior to 0.8.6, including multiple earlier versions.
What types of attacks does CVE-2011-2176 allow?
CVE-2011-2176 allows local users to potentially bypass intended wireless network sharing restrictions.
Is CVE-2011-2176 a remote or local vulnerability?
CVE-2011-2176 is a local vulnerability, meaning it can be exploited by users with access to the local system.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-2176
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/gnome
- canonical/networkmanager
- version/networkmanager/0.8.4
- version/networkmanager/0.2.0
- version/networkmanager/0.3.0
- version/networkmanager/0.3.1
- version/networkmanager/0.4.1
- version/networkmanager/0.5.0
- version/networkmanager/0.5.1
- version/networkmanager/0.6.0
- version/networkmanager/0.6.1
- version/networkmanager/0.6.2
- version/networkmanager/0.6.6
- version/networkmanager/0.7.0
- version/networkmanager/0.7.1
- version/networkmanager/0.7.2
- version/networkmanager/0.8.1
- version/networkmanager/0.8.2