Debian Security Bug TrackerDEBIANCVE:CVE-2011-3364CVE-2011-3364
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
5.1%
Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | network-manager-applet | < 1.30.0-2 | network-manager-applet_1.30.0-2_all.deb |
| Debian | 11 | all | network-manager-applet | < 1.20.0-3 | network-manager-applet_1.20.0-3_all.deb |
| Debian | 999 | all | network-manager-applet | < 1.36.0-1 | network-manager-applet_1.36.0-1_all.deb |
| Debian | 13 | all | network-manager-applet | < 1.36.0-1 | network-manager-applet_1.36.0-1_all.deb |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS
Percentile
5.1%