Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2176
HistorySep 02, 2011 - 12:00 a.m.

CVE-2011-2176

2011-09-0200:00:00
ubuntu.com
ubuntu.com
7

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%

GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin
element in PolicyKit, which allows local users to bypass intended wireless
network sharing restrictions via unspecified vectors.

Bugs

Notes

Author Note
mdeslaur lucid needs a backport of the whole policykit handling code, too intrusive, likely to cause regressions.

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

EPSS

0

Percentile

5.1%