PT-2017-17173 · Canonical+3 · Lightdm+4

Frederic Bardy + 1 · Published 2017-03-09 · Updated 2019-10-03 · CVE-2017-6590

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions network-manager-applet versions 12.04 LTS through 16.10

Description A local attacker could exploit this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer, with Wi-Fi turned on, and an access point that allows certificate-based login. This could allow an attacker to open a nautilus window, browse directories, and open applications like Firefox, potentially for downloading malicious binaries.

Recommendations For versions 12.04 LTS through 16.10, consider restricting access to the network-manager-applet at the login screen until a patch is available. As a temporary workaround, disabling Wi-Fi at the login screen or requiring a password for Wi-Fi access could minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2017-6590

OPENSUSE-SU-2024:10603-1

Affected Products

Debian

Firefox

Lightdm

Nautilus

Network-Manager-Applet

References · 12

• 🔥 https://youtube.com/watch?v=Fp2lwRVg0l0 · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-6590 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2017-6590 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6590 · Security Note
• https://security.gentoo.org/glsa/201707-09 · Vendor Advisory
• https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/1668321 · Patch
• https://ubuntu.com/usn/usn-3217-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2017-6590 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2017-6590 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6590 · Vendor Advisory
• http://securitytracker.com/id/1037977 · Note