Rapid7 Vulnerability & Exploit Database

SUSE: CVE-2017-6590: SUSE Linux Security Advisory

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

SUSE: CVE-2017-6590: SUSE Linux Security Advisory

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
03/09/2017
Created
07/25/2018
Added
05/20/2018
Modified
02/04/2022

Description

An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries.

Solution(s)

  • suse-upgrade-libnm-gtk-devel
  • suse-upgrade-libnm-gtk0
  • suse-upgrade-libnma-devel
  • suse-upgrade-libnma0
  • suse-upgrade-networkmanager-applet
  • suse-upgrade-networkmanager-applet-lang
  • suse-upgrade-networkmanager-connection-editor
  • suse-upgrade-nma-data
  • suse-upgrade-typelib-1_0-nma-1_0
  • suse-upgrade-typelib-1_0-nmgtk-1_0

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;