Oval Definition:	oval:org.opensuse.security:def:20176590
Revision Date: 2022-09-02 Version: 1 Title: CVE-2017-6590 Description: An issue was discovered in network-manager-applet (aka network-manager-gnome) in Ubuntu 12.04 LTS, 14.04 LTS, 16.04 LTS, and 16.10. A local attacker could use this issue at the default Ubuntu login screen to access local files and execute arbitrary commands as the lightdm user. The exploitation requires physical access to the locked computer and the Wi-Fi must be turned on. An access point that lets you use a certificate to login is required as well, but it's easy to create one. Then, it's possible to open a nautilus window and browse directories. One also can open some applications such as Firefox, which is useful for downloading malicious binaries. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-6590 Mitre CVE-2017-6590 SUSE CVE-2017-6590 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Desktop 12 SP5 SUSE Linux Enterprise Desktop 15 SUSE Linux Enterprise Desktop 15 SP1 SUSE Linux Enterprise Desktop 15 SP2 SUSE Linux Enterprise Desktop 15 SP3 SUSE Linux Enterprise Desktop 15 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP2 SUSE Linux Enterprise High Performance Computing 15 SP3 SUSE Linux Enterprise Module for Desktop Applications 15 SUSE Linux Enterprise Module for Desktop Applications 15 SP1 SUSE Linux Enterprise Module for Desktop Applications 15 SP2 SUSE Linux Enterprise Module for Desktop Applications 15 SP3 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 SP1 SUSE Linux Enterprise Server 15 SP2 SUSE Linux Enterprise Server 15 SP3 SUSE Linux Enterprise Server 15 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP1 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Storage 6 SUSE Linux Enterprise Storage 7 SUSE Linux Enterprise Storage 7.1 SUSE Linux Enterprise Workstation Extension 12 SP1 SUSE Linux Enterprise Workstation Extension 12 SP2 SUSE Linux Enterprise Workstation Extension 12 SP3 SUSE Linux Enterprise Workstation Extension 12 SP4 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Workstation Extension 15 SUSE Linux Enterprise Workstation Extension 15 SP1 SUSE Linux Enterprise Workstation Extension 15 SP2 SUSE Linux Enterprise Workstation Extension 15 SP4 SUSE Manager Proxy 4.0 SUSE Manager Proxy 4.1 SUSE Manager Proxy 4.2 SUSE Manager Retail Branch Server 4.0 SUSE Manager Retail Branch Server 4.1 SUSE Manager Retail Branch Server 4.2 SUSE Manager Server 4.0 SUSE Manager Server 4.1 SUSE Manager Server 4.2 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 Product(s): Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP2 is installed OR SUSE OpenStack Cloud 7 is installed AND NetworkManager-gnome is affected Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information NetworkManager-applet-1.8.10-lp150.3 is installed AND NetworkManager-applet is signed with openSUSE key OR NetworkManager-applet-lang-1.8.10-lp150.3 is installed AND NetworkManager-applet-lang is signed with openSUSE key OR NetworkManager-connection-editor-1.8.10-lp150.3 is installed AND NetworkManager-connection-editor is signed with openSUSE key OR libnm-gtk0-1.8.10-lp150.3 is installed AND libnm-gtk0 is signed with openSUSE key OR libnma0-1.8.10-lp150.3 is installed AND libnma0 is signed with openSUSE key OR nma-data-1.8.10-lp150.3 is installed AND nma-data is signed with openSUSE key OR typelib-1_0-NMGtk-1_0-1.8.10-lp150.3 is installed AND typelib-1_0-NMGtk-1_0 is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 is installed AND libnm-gtk-devel-1.8.10-3 is installed OR libnm-gtk0-1.8.10-3 is installed OR libnma-devel-1.8.10-3 is installed OR libnma0-1.8.10-3 is installed OR nma-data-1.8.10-3 is installed OR typelib-1_0-NMA-1_0-1.8.10-3 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 is installed AND NetworkManager-applet-1.8.10-3 is installed OR NetworkManager-applet-lang-1.8.10-3 is installed OR NetworkManager-connection-editor-1.8.10-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP1 is installed OR SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed AND NetworkManager-gnome is affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libnm-gtk-devel-1.8.10-3 is installed OR libnm-gtk0-1.8.10-3 is installed OR libnma-devel-1.8.10-3 is installed OR libnma0-1.8.10-3 is installed OR nma-data-1.8.10-3 is installed OR typelib-1_0-NMA-1_0-1.8.10-3 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-applet-1.8.10-3 is installed OR NetworkManager-applet-lang-1.8.10-3 is installed OR NetworkManager-connection-editor-1.8.10-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP4 is installed AND NetworkManager-gnome is affected OR Package Information SUSE OpenStack Cloud 9 is installed OR SUSE OpenStack Cloud Crowbar 9 is installed AND libnm-gtk0 is affected OR typelib-1_0-NMGtk-1_0 is affected Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libnm-gtk-devel-1.8.10-3 is installed OR libnm-gtk0-1.8.10-3 is installed OR libnma-devel-1.8.10-3 is installed OR libnma0-1.8.10-3 is installed OR nma-data-1.8.10-3 is installed OR typelib-1_0-NMA-1_0-1.8.10-3 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-applet-1.8.10-3 is installed OR NetworkManager-applet-lang-1.8.10-3 is installed OR NetworkManager-connection-editor-1.8.10-3 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND libnma-devel-1.8.24-5 is installed OR libnma0-1.8.24-5 is installed OR nma-data-1.8.24-5 is installed OR typelib-1_0-NMA-1_0-1.8.24-5 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND NetworkManager-applet-1.8.24-5 is installed OR NetworkManager-applet-lang-1.8.24-5 is installed OR NetworkManager-connection-editor-1.8.24-5 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libnm-gtk-devel-1.8.10-3 is installed OR libnm-gtk0-1.8.10-3 is installed OR libnma-devel-1.8.10-3 is installed OR libnma0-1.8.10-3 is installed OR nma-data-1.8.10-3 is installed OR typelib-1_0-NMA-1_0-1.8.10-3 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-applet-1.8.10-3 is installed OR NetworkManager-applet-lang-1.8.10-3 is installed OR NetworkManager-connection-editor-1.8.10-3 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND libnma-devel-1.8.24-5 is installed OR libnma0-1.8.24-5 is installed OR nma-data-1.8.24-5 is installed OR typelib-1_0-NMA-1_0-1.8.24-5 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND NetworkManager-applet-1.8.24-5 is installed OR NetworkManager-applet-lang-1.8.24-5 is installed OR NetworkManager-connection-editor-1.8.24-5 is installed Definition Synopsis openSUSE Tumbleweed is installed AND Package Information NetworkManager-applet-1.24.0-1.2 is installed OR NetworkManager-applet-lang-1.24.0-1.2 is installed OR NetworkManager-connection-editor-1.24.0-1.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libnm-gtk-devel-1.8.10-3.39 is installed OR libnm-gtk0-1.8.10-3.39 is installed OR libnma-devel-1.8.10-3.39 is installed OR libnma0-1.8.10-3.39 is installed OR nma-data-1.8.10-3.39 is installed OR typelib-1_0-NMA-1_0-1.8.10-3.39 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3.39 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-applet-1.8.10-3.39 is installed OR NetworkManager-applet-lang-1.8.10-3.39 is installed OR NetworkManager-connection-editor-1.8.10-3.39 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND libnma-devel-1.8.24-5.2 is installed OR libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND NetworkManager-applet-1.8.24-5.2 is installed OR NetworkManager-applet-lang-1.8.24-5.2 is installed OR NetworkManager-connection-editor-1.8.24-5.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Module for Desktop Applications 15 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP1 is installed AND libnm-gtk-devel-1.8.10-3.39 is installed OR libnm-gtk0-1.8.10-3.39 is installed OR libnma-devel-1.8.10-3.39 is installed OR libnma0-1.8.10-3.39 is installed OR nma-data-1.8.10-3.39 is installed OR typelib-1_0-NMA-1_0-1.8.10-3.39 is installed OR typelib-1_0-NMGtk-1_0-1.8.10-3.39 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed AND libnma-devel-1.8.24-5.2 is installed OR libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed OR Package Information SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed AND libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP1 is installed AND NetworkManager-applet-1.8.10-3.39 is installed OR NetworkManager-applet-lang-1.8.10-3.39 is installed OR NetworkManager-connection-editor-1.8.10-3.39 is installed OR Package Information SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND NetworkManager-applet-1.8.24-5.2 is installed OR NetworkManager-applet-lang-1.8.24-5.2 is installed OR NetworkManager-connection-editor-1.8.24-5.2 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND NetworkManager-gnome is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND Package Information libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP1 is installed OR SUSE Linux Enterprise Desktop 12 SP2 is installed OR SUSE Linux Enterprise Desktop 12 SP3 is installed OR SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP1 is installed OR SUSE Linux Enterprise Server 12 SP2 is installed OR SUSE Linux Enterprise Server 12 SP3 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP1 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP1 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP3 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND NetworkManager-gnome is affected OR Package Information SUSE Linux Enterprise Desktop 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND NetworkManager-connection-editor is affected OR NetworkManager-gnome is affected OR NetworkManager-gnome-lang is affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libnm-gtk0 is affected OR typelib-1_0-NMGtk-1_0 is affected Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND NetworkManager-gnome is affected OR Package Information SUSE OpenStack Cloud 8 is installed OR SUSE OpenStack Cloud Crowbar 8 is installed AND libnm-gtk0 is affected OR typelib-1_0-NMGtk-1_0 is affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP2 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Storage 7 is installed OR SUSE Manager Proxy 4.1 is installed OR SUSE Manager Retail Branch Server 4.1 is installed OR SUSE Manager Server 4.1 is installed AND libnma-devel-1.8.24-5.2 is installed OR libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP3 is installed OR SUSE Linux Enterprise High Performance Computing 15 SP3 is installed OR SUSE Linux Enterprise Module for Desktop Applications 15 SP3 is installed OR SUSE Linux Enterprise Server 15 SP3 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP3 is installed OR SUSE Linux Enterprise Storage 7.1 is installed OR SUSE Manager Proxy 4.2 is installed OR SUSE Manager Retail Branch Server 4.2 is installed OR SUSE Manager Server 4.2 is installed AND libnma0-1.8.24-5.2 is installed OR nma-data-1.8.24-5.2 is installed OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed OR Package Information SUSE Linux Enterprise Desktop 15 SP2 is installed OR SUSE Linux Enterprise Server 15 SP2 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP2 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP2 is installed AND NetworkManager-applet-1.8.24-5.2 is installed OR NetworkManager-applet-lang-1.8.24-5.2 is installed OR NetworkManager-connection-editor-1.8.24-5.2 is installed Definition Synopsis openSUSE Leap 15.3 is installed AND Package Information NetworkManager-applet-1.8.24-5.2 is installed AND NetworkManager-applet is signed with openSUSE key OR NetworkManager-applet-lang-1.8.24-5.2 is installed AND NetworkManager-applet-lang is signed with openSUSE key OR NetworkManager-connection-editor-1.8.24-5.2 is installed AND NetworkManager-connection-editor is signed with openSUSE key OR libnma0-1.8.24-5.2 is installed AND libnma0 is signed with openSUSE key OR nma-data-1.8.24-5.2 is installed AND nma-data is signed with openSUSE key OR typelib-1_0-NMA-1_0-1.8.24-5.2 is installed AND typelib-1_0-NMA-1_0 is signed with openSUSE key Definition Synopsis openSUSE Leap 15.4 is installed AND Package Information NetworkManager-applet-1.24.0-150400.2.9 is installed AND NetworkManager-applet is signed with openSUSE key OR NetworkManager-applet-lang-1.24.0-150400.2.9 is installed AND NetworkManager-applet-lang is signed with openSUSE key OR NetworkManager-connection-editor-1.24.0-150400.2.9 is installed AND NetworkManager-connection-editor is signed with openSUSE key Definition Synopsis Release Information SUSE Linux Enterprise Desktop 15 SP4 is installed OR SUSE Linux Enterprise Server 15 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 15 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 15 SP4 is installed AND Package Information NetworkManager-applet-1.24.0-150400.2.9 is installed OR NetworkManager-applet-lang-1.24.0-150400.2.9 is installed OR NetworkManager-connection-editor-1.24.0-150400.2.9 is installed Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND NetworkManager-gnome is affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed AND libnm-gtk-devel is affected OR Package Information SUSE Linux Enterprise Desktop 12 SP5 is installed OR SUSE Linux Enterprise Server 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP5 is installed AND NetworkManager-connection-editor is affected OR NetworkManager-gnome is affected OR NetworkManager-gnome-lang is affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND libnm-gtk0 is affected OR typelib-1_0-NMGtk-1_0 is affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed OR SUSE Linux Enterprise Software Development Kit 12 SP4 is installed OR SUSE Linux Enterprise Workstation Extension 12 SP4 is installed AND NetworkManager-gnome is affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND libnm-gtk0 is affected OR typelib-1_0-NMGtk-1_0 is affected
BACK