Description
Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://xorl.wordpress.com/2011/10/09/cve-2011-3364-gnome-networkmanager-local-privilege-escalation/ ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066828.html ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=737338 ↗
- http://www.mandriva.com/security/advisories?name=MDVSA-2011:171 ↗
- http://www.redhat.com/support/errata/RHSA-2011-1338.html ↗