CVE-2011-3364
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2011-3364
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incomplete blacklist vulnerability in the svEscape function in settings/plugins/ifcfg-rh/shvar.c in the ifcfg-rh plug-in for GNOME NetworkManager 0.9.1, 0.9.0, 0.8.1, and possibly other versions, when PolicyKit is configured to allow users to create new connections, allows local users to execute arbitrary commands via a newline character in the name for a new network connection, which is not properly handled when writing to the ifcfg file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
GNOME NetworkManager本地权限提升漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GNOME是Helix Code公司开发的用于Unix/Linux的桌面环境，它含有一个组件 updater，自动下载其他组件的新版本并安装之。 GNOME NetworkManager中存在本地权限提升漏洞。本地攻击者可利用该漏洞用提升的权限执行任意代码，拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2011-3364
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-3364
请登录查看更多情报信息。
- https://bugzilla.redhat.com/show_bug.cgi?id=737338x_refsource_MISC
- http://lists.fedoraproject.org/pipermail/package-announce/2011-September/066828.htmlvendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2011-3364
Same Patch Batch · n/a · 2011-11-04 · 12 CVEs total
| CVE-2011-1513 | e107 ‘cmd’ 参数远程命令执行漏洞 | |
| CVE-2011-3164 | HP-UX Containers 本地权限提升漏洞 | |
| CVE-2011-3171 | Pure-FTPd本地文件覆盖漏洞 | |
| CVE-2011-3330 | Schneider Electric 多个产品本地权限提升漏洞 | |
| CVE-2011-3402 | Microsoft Windows 任意代码执行漏洞 | |
| CVE-2011-3581 | ldns 缓冲区溢出漏洞 | |
| CVE-2011-3594 | libpurple SILC协议拒绝服务漏洞 | |
| CVE-2011-3616 | Gentoo 本地权限提升漏洞 | |
| CVE-2011-3989 | DBD::mysqlPP SQL注入漏洞 | |
| CVE-2011-3991 | FFFTP不安全可执行文件加载任意代码执行漏洞 | |
| CVE-2011-4066 | Gnuboard 'board.php' SQL注入漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2011-3364
No comments yet