CVE-2012-1096
CVE-2012-1096
This page contains facts from public vulnerability sources. Check the original advisory before updating.
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection.
CVSS 5.5 · Medium · EPSS 0.7% · Public exploit
- Published
- Updated
Stack: system
Affected products and versions
networkmanager
- Versions
- 0.9 and earlier: Affected
No fix published
network-manager Ubuntu:16.04:LTS
- Versions
- 1.0.4-0ubuntu5
- 1.0.4-0ubuntu6
- 1.0.4-0ubuntu7
- 1.0.4-0ubuntu8
- 1.0.4-0ubuntu9
- 1.0.4-0ubuntu10
- 1.1.93-0ubuntu2
- 1.1.93-0ubuntu3
- 1.1.93-0ubuntu4
- 1.2.0-0ubuntu0.16.04.2
- 1.2.0-0ubuntu0.16.04.3
- 1.2.2-0ubuntu0.16.04.1
- 1.2.2-0ubuntu0.16.04.3
- 1.2.2-0ubuntu0.16.04.4
- 1.2.6-0ubuntu0.16.04.1
- 1.2.6-0ubuntu0.16.04.2
- 1.2.6-0ubuntu0.16.04.3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:18.04:LTS
- Versions
- 1.8.4-1ubuntu3
- 1.8.4-1ubuntu4
- 1.10.4-1ubuntu2
- 1.10.4-1ubuntu3
- 1.10.6-2ubuntu1
- 1.10.6-2ubuntu1.1
- 1.10.6-2ubuntu1.2
- 1.10.6-2ubuntu1.4
- 1.10.14-0ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:20.04:LTS
- Versions
- 1.20.4-2ubuntu2
- 1.20.4-2ubuntu3
- 1.20.8-1ubuntu2
- 1.22.4-1ubuntu2
- 1.22.8-1ubuntu1
- 1.22.10-1ubuntu1
- 1.22.10-1ubuntu2.1
- 1.22.10-1ubuntu2.2
- 1.22.10-1ubuntu2.3
- 1.22.10-1ubuntu2.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:22.04:LTS
- Versions
- 1.32.12-0ubuntu1
- 1.32.12-0ubuntu2
- 1.34.0-2ubuntu3
- 1.35.90-0ubuntu1
- 1.35.91-0ubuntu1
- 1.35.92-1ubuntu1
- 1.36.0-1ubuntu2
- 1.36.2-1ubuntu1
- 1.36.4-1ubuntu1
- 1.36.4-2ubuntu1
- 1.36.6-0ubuntu1
- 1.36.6-0ubuntu2
- 1.36.6-0ubuntu2.1
- 1.36.6-0ubuntu2.2
- 1.36.6-0ubuntu2.3
- 1.36.6-0ubuntu2.4
- 1.36.6-0ubuntu2.5
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:24.04:LTS
- Versions
- 1.44.2-1ubuntu1
- 1.44.2-1ubuntu1.1
- 1.44.2-1ubuntu2
- 1.44.2-7ubuntu1
- 1.45.90-1ubuntu1
- 1.45.90-1ubuntu3
- 1.46.0-1ubuntu2
- 1.46.0-1ubuntu2.2
- 1.46.0-1ubuntu2.3
- 1.46.0-1ubuntu2.4
- 1.46.0-1ubuntu2.5
- 1.46.0-1ubuntu2.6
- 1.46.0-1ubuntu2.7
- 1.46.0-1ubuntu2.8
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:25.10
- Versions
- 1.52.0-1ubuntu1
- 1.52.0-1ubuntu3
- 1.52.0-1ubuntu3.1
- 1.52.0-1ubuntu3.2
- 1.52.0-1ubuntu3.3
- 1.52.0-1ubuntu3.4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:26.10
- Versions
- 1.54.3-2ubuntu3
- 1.56.0-7ubuntu1
- 1.56.1-1ubuntu1
- 1.58.0-2ubuntu1
- 1.58.1-1ubuntu3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
network-manager Ubuntu:26.04:LTS
- Versions
- 1.52.0-1ubuntu3
- 1.52.0-1ubuntu4
- 1.54.2-2ubuntu1
- 1.54.2-2ubuntu2
- 1.54.3-2ubuntu1
- 1.54.3-2ubuntu2
- 1.54.3-2ubuntu3
- 1.54.3-2ubuntu3.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
Original sources
- https://security-tracker.debian.org/tracker/CVE-2012-1096
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1096
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-1096
- https://access.redhat.com/security/cve/cve-2012-1096
- http://www.openwall.com/lists/oss-security/2012/03/02/3
- https://bugzilla.gnome.org/show_bug.cgi?id=793329
- https://nvd.nist.gov/vuln/detail/CVE-2012-1096