Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - NetworkManager: creating new WPA-secured wireless network results in insecure network being created     instead (CVE-2012-2736)

  - NetworkManager: Race condition allowing info leak (CVE-2016-0764)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

According to the version of the libnl3 packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - A race condition vulnerability was discovered in     NetworkManager.Temporary files were created insecurely     when saving or updating connection settings, which     could allow local users to read connection secrets such     as VPN passwords or WiFi keys. (CVE-2016-0764)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager- applet (1.4.0), libnl3 (3.2.28).

Security Fix(es) :

  - A race condition vulnerability was discovered in     NetworkManager. Temporary files were created insecurely     when saving or updating connection settings, which could     allow local users to read connection secrets such as VPN     passwords or WiFi keys. (CVE-2016-0764)

Additional Changes :

An update for NetworkManager is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager-applet (1.4.0), libnl3 (3.2.28). (BZ#1264552, BZ#1296058, BZ# 1032717, BZ#1271581)

Security Fix(es) :

* A race condition vulnerability was discovered in NetworkManager.
Temporary files were created insecurely when saving or updating connection settings, which could allow local users to read connection secrets such as VPN passwords or WiFi keys. (CVE-2016-0764)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

From Red Hat Security Advisory 2016:2581 :

An update for NetworkManager is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link (s) in the References section.

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

The following packages have been upgraded to a newer upstream version:
NetworkManager (1.4.0), NetworkManager-libreswan (1.2.4), network-manager-applet (1.4.0), libnl3 (3.2.28). (BZ#1264552, BZ#1296058, BZ# 1032717, BZ#1271581)

Security Fix(es) :

* A race condition vulnerability was discovered in NetworkManager.
Temporary files were created insecurely when saving or updating connection settings, which could allow local users to read connection secrets such as VPN passwords or WiFi keys. (CVE-2016-0764)

Additional Changes :

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.3 Release Notes linked from the References section.

ID	Name	Product	Family	Severity
198645	RHEL 6 : networkmanager (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	medium
99829	EulerOS 2.0 SP1 : libnl3 (EulerOS-SA-2016-1067)	Nessus	Huawei Local Security Checks	medium
95833	Scientific Linux Security Update : NetworkManager on SL7.x x86_64 (20161103)	Nessus	Scientific Linux Local Security Checks	medium
95328	CentOS 7 : NetworkManager / NetworkManager-libreswan / libnl3 / network-manager-applet (CESA-2016:2581)	Nessus	CentOS Local Security Checks	medium
94703	Oracle Linux 7 : NetworkManager (ELSA-2016-2581)	Nessus	Oracle Linux Local Security Checks	medium
94544	RHEL 7 : NetworkManager (RHSA-2016:2581)	Nessus	Red Hat Local Security Checks	medium

Detections

Analytics

CVE-2016-0764

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium