PT-2020-7042 · Unknown+2 · Networkmanager+2

Ludwig Nussel · Published 2012-02-18 · Updated 2024-06-15 · CVE-2006-7246

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NetworkManager versions 0.9.x

Description The issue concerns a problem where NetworkManager does not properly associate a certificate's subject with an ESSID when using 802.11X authentication. This could potentially lead to security issues, as the authentication process may not correctly verify the identity of the network being connected to.

Recommendations For NetworkManager versions 0.9.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

ALT-PU-2014-1962

CVE-2006-7246

OPENSUSE-SU-2024:10152-1

SUSE-SU-2012_0283-1

Affected Products

Alt Linux

Networkmanager

Suse

References · 13

• 🔥 https://bugzilla.gnome.org/show_bug.cgi?id=341323 · Exploit
• 🔥 https://lwn.net/Articles/468868 · Exploit
• 🔥 https://bugzilla.novell.com/show_bug.cgi?id=574266 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-7246 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-7246 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-7246 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10152-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-7246 · Vendor Advisory
• https://suse.com/security/cve/CVE-2015-2924 · Note
• https://suse.com/security/cve/CVE-2016-0764 · Note
• http://openwall.com/lists/oss-security/2010/04/22/2 · Note
• https://t.me/cibsecurity/9429 · Telegram Post
• https://suse.com/security/cve/CVE-2006-7246 · Note