Executive Summary



This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary
Title network-manager-applet vulnerability
Informations
Name USN-1483-2 First vendor Publication 2012-06-27
Vendor Ubuntu Last vendor Modification 2012-06-27
Severity (Vendor) N/A Revision N/A

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Overall CVSS Score 4.4
Base Score 4.4 Environmental Score 4.4
impact SubScore 2.5 Temporal Score 4.4
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact Low
Integrity Impact Low Availability Impact None
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:L/AC:M/Au:N/C:P/I:P/A:N)
Cvss Base Score 3.3 Attack Range Local
Cvss Impact Score 4.9 Attack Complexity Medium
Cvss Expoit Score 3.4 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10 - Ubuntu 11.04 - Ubuntu 10.04 LTS

Summary:

network-manager-applet could create insecure AdHoc wireless networks.

Software Description: - network-manager-applet: GNOME frontend for NetworkManager

Details:

USN-1483-1 fixed a vulnerability in NetworkManager by disabling the creation of WPA-secured AdHoc wireless connections. This update provides the corresponding change for network-manager-applet.

Original advisory details:

It was discovered that certain wireless drivers incorrectly handled the
creation of WPA-secured AdHoc connections. This could result in AdHoc
wireless connections being created without any security at all. This update
removes WPA as a security choice for AdHoc connections in NetworkManager.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 11.10:
network-manager-gnome 0.9.1.90-0ubuntu6.1

Ubuntu 11.04:
network-manager-gnome 0.8.4~git.20110318t152954.9c4c9a0-0ubuntu1.1

Ubuntu 10.04 LTS:
network-manager-gnome 0.8-0ubuntu3.1

After a standard system update you need to restart your session to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-1483-2
http://www.ubuntu.com/usn/usn-1483-1
CVE-2012-2736

Package Information:
https://launchpad.net/ubuntu/+source/network-manager-applet/0.9.1.90-0ubuntu6.1
https://launchpad.net/ubuntu/+source/network-manager-applet/0.8.4~git.20110318t152954.9c4c9a0-0ubuntu1.1
https://launchpad.net/ubuntu/+source/network-manager-applet/0.8-0ubuntu3.1

Original Source

Url : http://www.ubuntu.com/usn/USN-1483-2

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-306 Missing Authentication for Critical Function (CWE/SANS Top 25)

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:17628
 
Oval ID: oval:org.mitre.oval:def:17628
Title: USN-1483-1 -- network-manager vulnerability
Description: NetworkManager could create insecure AdHoc wireless networks.
Family: unix Class: patch
Reference(s): USN-1483-1
CVE-2012-2736
 Version: 7
Platform(s): Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
 Product(s): network-manager
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:17906
 
Oval ID: oval:org.mitre.oval:def:17906
Title: USN-1483-2 -- network-manager-applet vulnerability
Description: network-manager-applet could create insecure AdHoc wireless networks.
Family: unix Class: patch
Reference(s): USN-1483-2
CVE-2012-2736
 Version: 7
Platform(s): Ubuntu 11.10
Ubuntu 11.04
Ubuntu 10.04
 Product(s): network-manager-applet
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 1
Os 3
Os 3
Os 1

OpenVAS Exploits

Date Description
2012-06-28 Name : Ubuntu Update for network-manager USN-1483-1
File : nvt/gb_ubuntu_USN_1483_1.nasl
2012-06-28 Name : Ubuntu Update for network-manager-applet USN-1483-2
File : nvt/gb_ubuntu_USN_1483_2.nasl

Nessus® Vulnerability Scanner

Date Description
2014-06-13 Name : The remote openSUSE host is missing a security update.
File : openSUSE-2012-589.nasl - Type : ACT_GATHER_INFO
2012-06-28 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1483-1.nasl - Type : ACT_GATHER_INFO
2012-06-28 Name : The remote Ubuntu host is missing a security-related patch.
File : ubuntu_USN-1483-2.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.
0
1
Date Informations
2020-05-23 13:03:45
  • Multiple Updates
2014-02-17 12:00:19
  • Multiple Updates