PT-2019-6764 · Networkmanager · Networkmanager

Vincent Danen · Publicado 2019-12-26 · Atualizado 2020-08-18 · CVE-2012-2736

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions NetworkManager version 0.9.2.0

Description The issue arises when a new wireless network is created with WPA/WPA2 security in AdHoc mode, resulting in the creation of an open or insecure network.

Recommendations For NetworkManager version 0.9.2.0, consider configuring the network settings manually to ensure the creation of a secure network, as the automatic setup may lead to an insecure configuration.

Exploit

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2012-2736

Produtos afetados

Networkmanager

Referências · 12

• 🔥 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2736 · Exploit
• http://openwall.com/lists/oss-security/2012/06/15/4 · Correção
• https://osv.dev/vulnerability/DEBIAN-CVE-2012-2736 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/06/15/2 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-2736 · Aviso do Fabricante
• https://access.redhat.com/security/cve/cve-2012-2736 · Nota
• http://ubuntu.com/usn/USN-1483-2 · Nota
• https://osv.dev/vulnerability/CVE-2012-2736 · Aviso do Fabricante
• https://t.me/cibsecurity/8858 · Publicação no Telegram
• http://lists.opensuse.org/opensuse-updates/2012-09/msg00049.html · Correção
• http://ubuntu.com/usn/USN-1483-1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2736 · Nota de Segurança