openSUSE Security Update : NetworkManager-gnome (openSUSE-SU-2012:0101-1)

medium Nessus Plugin ID 75977

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

NetworkManager did not pin a certificate's subject to an ESSID. A rogue access point could therefore be used to conduct MITM attacks by using any other valid certificate issued by same CA as used in the original network (CVE-2006-7246).

Please note that existing WPA2 Enterprise connections need to be deleted and re-created to take advantage of the new security checks.

This is a re-release of the previous update to also enable the checks for EAP-TLS.

Solution

Update the affected NetworkManager-gnome packages.

Plugin Details

Severity: Medium

ID: 75977

File Name: suse_11_4_NetworkManager-gnome-120110.nasl

Version: 1.5

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 6/13/2014

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Continuous Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

Vulnerability Information

CPE: cpe:/o:novell:opensuse:11.4, p-cpe:/a:novell:opensuse:networkmanager-gnome-lang, p-cpe:/a:novell:opensuse:networkmanager-gnome-debugsource, p-cpe:/a:novell:opensuse:networkmanager-gnome-debuginfo, p-cpe:/a:novell:opensuse:networkmanager-gnome

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 1/10/2012

Reference Information

CVE: CVE-2006-7246

Detections

Analytics