Ubuntu Linux 12.04 LTS/14.04 LTS/16.04 LTS/16.10 network-manager-applet access control

Summaryinfo

A vulnerability marked as problematic has been reported in Ubuntu Linux 12.04 LTS/14.04 LTS/16.04 LTS/16.10. Affected by this vulnerability is an unknown functionality of the component network-manager-applet. This manipulation causes access control. This vulnerability is handled as CVE-2017-6590. It is possible to launch the attack on the local host. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability was found in Ubuntu Linux 12.04 LTS/14.04 LTS/16.04 LTS/16.10 (Operating System). It has been declared as problematic. Affected by this vulnerability is an unknown code of the component network-manager-applet. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.

The bug was discovered 02/27/2017. The weakness was released 03/09/2017 (Website). The advisory is shared at ubuntu.com. This vulnerability is known as CVE-2017-6590 since 03/09/2017. An attack has to be approached locally. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

The vulnerability was handled as a non-public zero-day exploit for at least 10 days. During that time the estimated underground price was around $5k-$25k. The vulnerability scanner Nessus provides a plugin with the ID 101340 (GLSA-201707-09 : GNOME applet for NetworkManager: Arbitrary file read/write), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Gentoo Local Security Checks and running in the context l.

Upgrading eliminates this vulnerability. A possible mitigation has been published 5 months after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at Tenable (101340) and SecurityTracker (ID 1037977†). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Ubuntu

Name

• Linux

Version

• 12.04 LTS
• 14.04 LTS
• 16.04 LTS
• 16.10

License

• open-source

Website

• Vendor: https://www.ubuntu.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion