Rapid7 Vulnerability & Exploit Database

Gentoo Linux: CVE-2017-6590: GNOME applet for NetworkManager: Arbitrary file read/write

Back to Search

Gentoo Linux: CVE-2017-6590: GNOME applet for NetworkManager: Arbitrary file read/write

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
03/09/2017
Created
07/25/2018
Added
10/30/2017
Modified
10/30/2017

Description

An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.

Solution(s)

  • gentoo-linux-upgrade-gnome-extra-nm-applet

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;