NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - wpa_supplicant: local configuration update allows privilege escalation (CVE-2016-4477)

  - wpa_supplicant: Reinstallation of the pairwise key in the 4-way handshake (CVE-2017-13077)

  - NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when     making a connection via the file path when adding a new connection. (CVE-2012-1096)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization     (CVE-2012-1096)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - NetworkManager, wpa_supplicant: Improper x509v3 certificate and key file paths sanitization     (CVE-2012-1096)

  - wpa_supplicant: local configuration update allows privilege escalation (CVE-2016-4477)

  - hostapd 0.6.7 through 2.5 and wpa_supplicant 0.6.7 through 2.5 do not reject \n and \r characters in     passphrase parameters, which allows remote attackers to cause a denial of service (daemon outage) via a     crafted WPS operation. (CVE-2016-4476)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	Name	Product	Family	Severity
199408	RHEL 5 : wpa_supplicant (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
199406	RHEL 4 : wpa_supplicant (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
199348	RHEL 6 : wpa_supplicant (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2012-1096

medium

Tenable Plugins

high

medium

high