CVE-2011-2176

GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name	Vendor	Start Version	End Version
Networkmanager	Gnome	*	0.8.4 (including)
Networkmanager	Gnome	0.2.0 (including)	0.2.0 (including)
Networkmanager	Gnome	0.3.0 (including)	0.3.0 (including)
Networkmanager	Gnome	0.3.1 (including)	0.3.1 (including)
Networkmanager	Gnome	0.4.1 (including)	0.4.1 (including)
Networkmanager	Gnome	0.5.0 (including)	0.5.0 (including)
Networkmanager	Gnome	0.5.1 (including)	0.5.1 (including)
Networkmanager	Gnome	0.6.0 (including)	0.6.0 (including)
Networkmanager	Gnome	0.6.1 (including)	0.6.1 (including)
Networkmanager	Gnome	0.6.2 (including)	0.6.2 (including)
Networkmanager	Gnome	0.6.6 (including)	0.6.6 (including)
Networkmanager	Gnome	0.7.0 (including)	0.7.0 (including)
Networkmanager	Gnome	0.7.1 (including)	0.7.1 (including)
Networkmanager	Gnome	0.7.2 (including)	0.7.2 (including)
Networkmanager	Gnome	0.8.1 (including)	0.8.1 (including)
Networkmanager	Gnome	0.8.2 (including)	0.8.2 (including)
Red Hat Enterprise Linux 6	RedHat	NetworkManager-1:0.8.1-9.el6_1.1	*
Network-manager	Ubuntu	hardy	*
Network-manager	Ubuntu	lucid	*
Network-manager	Ubuntu	maverick	*
Network-manager	Ubuntu	natty	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-2176
CWE	https://cwe.mitre.org/data/definitions/287.html

Improper Authentication

Weakness

Affected Software

Potential Mitigations

References

CVE-2011-2176

Improper Authentication

Weakness

Affected Software

Potential Mitigations

Related Attack Patterns

References