CVE Vulnerabilities

CVE-2011-2176

Improper Authentication

Published: Sep 02, 2011 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
2.1 MODERATE
AV:L/AC:L/Au:N/C:N/I:P/A:N
RedHat/V3
Ubuntu
LOW

GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Networkmanager Gnome * 0.8.4 (including)
Networkmanager Gnome 0.2.0 (including) 0.2.0 (including)
Networkmanager Gnome 0.3.0 (including) 0.3.0 (including)
Networkmanager Gnome 0.3.1 (including) 0.3.1 (including)
Networkmanager Gnome 0.4.1 (including) 0.4.1 (including)
Networkmanager Gnome 0.5.0 (including) 0.5.0 (including)
Networkmanager Gnome 0.5.1 (including) 0.5.1 (including)
Networkmanager Gnome 0.6.0 (including) 0.6.0 (including)
Networkmanager Gnome 0.6.1 (including) 0.6.1 (including)
Networkmanager Gnome 0.6.2 (including) 0.6.2 (including)
Networkmanager Gnome 0.6.6 (including) 0.6.6 (including)
Networkmanager Gnome 0.7.0 (including) 0.7.0 (including)
Networkmanager Gnome 0.7.1 (including) 0.7.1 (including)
Networkmanager Gnome 0.7.2 (including) 0.7.2 (including)
Networkmanager Gnome 0.8.1 (including) 0.8.1 (including)
Networkmanager Gnome 0.8.2 (including) 0.8.2 (including)
Red Hat Enterprise Linux 6 RedHat NetworkManager-1:0.8.1-9.el6_1.1 *
Network-manager Ubuntu hardy *
Network-manager Ubuntu lucid *
Network-manager Ubuntu maverick *
Network-manager Ubuntu natty *

Potential Mitigations

References