Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi.

Avahi did not check that the received netlink messages originated from the kernel. This could be used by local attackers to inject packets into avahi which could be used to inject bad netlink messages into Avahi, confusing its routing code or worse. (CVE-2006-5461)

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Steve Grubb discovered that netlink messages were not being checked for their sender identity. This could lead to local users manipulating the Avahi service.

Packages have been patched to correct this issues.

The remote host is affected by the vulnerability described in GLSA-200611-13 (Avahi: 'netlink' message vulnerability)

    Avahi does not check that the netlink messages come from the kernel     instead of a user-space process.
  Impact :

    A local attacker could exploit this vulnerability by crafting malicious     netlink messages and trick Avahi to react to fake network changes. This     could lead users to connect to untrusted services without knowing.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
29381	SuSE 10 Security Update : avahi (ZYPP Patch Number 2216)	Nessus	SuSE Local Security Checks	low
27962	Ubuntu 5.10 / 6.06 LTS / 6.10 : avahi vulnerability (USN-380-1)	Nessus	Ubuntu Local Security Checks	low
27160	openSUSE 10 Security Update : avahi (avahi-2217)	Nessus	SuSE Local Security Checks	low
24600	Mandrake Linux Security Advisory : avahi (MDKSA-2006:215)	Nessus	Mandriva Local Security Checks	low
23707	GLSA-200611-13 : Avahi: 'netlink' message vulnerability	Nessus	Gentoo Local Security Checks	low

Detections

Analytics

CVE-2006-5461

medium

Tenable Plugins

low

low

low

low

low