Detections
Analytics
Scientific Linux Security Update : NetworkManager on SL6.x i386/x86_64
medium Nessus Plugin ID 61142
Language:
Synopsis
The remote Scientific Linux host is missing one or more security updates.Description
NetworkManager is a network link manager that attempts to keep a wired orwireless network connection active at all times. The ifcfg-rh
NetworkManager plug-in is used in Scientific Linux distributions to
read and write configuration information from the
/etc/sysconfig/network-scripts/ifcfg-* files.
An input sanitization flaw was found in the way the ifcfg-rh NetworkManager
plug-in escaped network connection names containing special characters. If
PolicyKit was configured to allow local, unprivileged users to create and
save new network connections, they could create a connection with a
specially crafted name, leading to the escalation of their privileges.
Note: By default, PolicyKit prevents unprivileged users from creating and
saving network connections. (CVE-2011-3364)
Users of NetworkManager should upgrade to these updated packages, which
contain a backported patch to correct this issue. Running instances of
NetworkManager must be restarted ('service NetworkManager restart') for
this update to take effect.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Medium
ID: 61142
File Name: sl_20110926_NetworkManager_on_SL6_x.nasl
Version: 1.7
Type: local
Agent: unix
Published: 8/1/2012
Updated: 1/14/2021
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/o:fermilab:scientific_linux
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu
Patch Publication Date: 9/26/2011
Reference Information
CVE: CVE-2011-3364