MiracleLinux 4 : NetworkManager-0.8.1-9.AXS4.3 (AXSA:2011-534:01)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-534:01 advisory. NetworkManager is a system network service that manages your network devices and connections, attempting to keep active network connectivity when...

SUSE CVE-2011-3364

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...

Scientific Linux Security Update : NetworkManager on SL6.x i386/x86_64

NetworkManager is a network link manager that attempts to keep a wired or wireless network connection active at all times. The ifcfg-rh NetworkManager plug-in is used in Scientific Linux distributions to read and write configuration information from the /etc/sysconfig/network-scripts/ifcfg- files...

Fedora 16 : NetworkManager-0.9.1.90-3.git20110927.fc16 (2011-13425)

This update fixes security issue in ifcfg-rh plugin CVE-2011-3364. This update also fixes an applet and connection editor crash caused by mis-packaging of some UI-related files, and corrects the path of iscsiadm. This update further adds the ability to delete connections from nmcli, correctly...

Fedora 15 : NetworkManager-0.9.1.90-1.git20110927.fc15 (2011-13388)

This update fixes security issue in ifcfg-rh plugin CVE-2011-3364. In addition, it updates to 0.9.1.90 featuring : - ability to delete connections from nmcli - correctly handles IPv6 link-local DNS servers when using the dnsmasq local caching nameserver plugin - fixes connection timestamps for VP...

NetworkManager: Console user can escalate to root via newlines in ifcfg-rh connection name

Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute...