CVE-2015-1322 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-1322 Interim 1 12 2024-07-03T02:28:20Z current 2021-05-30T13:27:40Z 2024-07-03T02:28:20Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-1322 Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local users to change the modem device configuration or read arbitrary files via a .. (dot dot) in the file name in a request to read modem device contexts (com.canonical.NMOfono.ReadImsiContexts). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Server 11 SP2 LTSS SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 12 NetworkManager NetworkManager-devel NetworkManager-glib NetworkManager-lang libnm-glib-vpn1 libnm-glib4 libnm-util2 typelib-1_0-NMClient-1_0 typelib-1_0-NetworkManager-1_0 NetworkManager as a component of SUSE Linux Enterprise Desktop 11 SP2 NetworkManager-glib as a component of SUSE Linux Enterprise Desktop 11 SP2 NetworkManager as a component of SUSE Linux Enterprise Desktop 11 SP3 NetworkManager-glib as a component of SUSE Linux Enterprise Desktop 11 SP3 NetworkManager as a component of SUSE Linux Enterprise Desktop 12 NetworkManager-lang as a component of SUSE Linux Enterprise Desktop 12 libnm-glib-vpn1 as a component of SUSE Linux Enterprise Desktop 12 libnm-glib4 as a component of SUSE Linux Enterprise Desktop 12 libnm-util2 as a component of SUSE Linux Enterprise Desktop 12 typelib-1_0-NMClient-1_0 as a component of SUSE Linux Enterprise Desktop 12 typelib-1_0-NetworkManager-1_0 as a component of SUSE Linux Enterprise Desktop 12 NetworkManager as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata NetworkManager as a component of SUSE Linux Enterprise Server 11 SP2 NetworkManager-glib as a component of SUSE Linux Enterprise Server 11 SP2 NetworkManager as a component of SUSE Linux Enterprise Server 11 SP2 LTSS NetworkManager as a component of SUSE Linux Enterprise Server 11 SP3 NetworkManager-glib as a component of SUSE Linux Enterprise Server 11 SP3 libnm-glib-vpn1 as a component of SUSE Linux Enterprise Server 12 libnm-glib4 as a component of SUSE Linux Enterprise Server 12 libnm-util2 as a component of SUSE Linux Enterprise Server 12 typelib-1_0-NMClient-1_0 as a component of SUSE Linux Enterprise Server 12 typelib-1_0-NetworkManager-1_0 as a component of SUSE Linux Enterprise Server 12 NetworkManager as a component of SUSE Linux Enterprise Server 12 NetworkManager-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 NetworkManager as a component of SUSE Linux Enterprise Software Development Kit 11 SP2 NetworkManager-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 NetworkManager as a component of SUSE Linux Enterprise Software Development Kit 11 SP3 NetworkManager as a component of SUSE Linux Enterprise Software Development Kit 12 NetworkManager-devel as a component of SUSE Linux Enterprise Software Development Kit 12 Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local users to change the modem device configuration or read arbitrary files via a .. (dot dot) in the file name in a request to read modem device contexts (com.canonical.NMOfono.ReadImsiContexts). CVE-2015-1322 SUSE Linux Enterprise Desktop 11 SP2:NetworkManager SUSE Linux Enterprise Desktop 11 SP2:NetworkManager-glib SUSE Linux Enterprise Desktop 11 SP3:NetworkManager SUSE Linux Enterprise Desktop 11 SP3:NetworkManager-glib SUSE Linux Enterprise Desktop 12:NetworkManager SUSE Linux Enterprise Desktop 12:NetworkManager-lang SUSE Linux Enterprise Desktop 12:libnm-glib-vpn1 SUSE Linux Enterprise Desktop 12:libnm-glib4 SUSE Linux Enterprise Desktop 12:libnm-util2 SUSE Linux Enterprise Desktop 12:typelib-1_0-NMClient-1_0 SUSE Linux Enterprise Desktop 12:typelib-1_0-NetworkManager-1_0 SUSE Linux Enterprise Server 11 SP1 for Teradata:NetworkManager SUSE Linux Enterprise Server 11 SP2 LTSS:NetworkManager SUSE Linux Enterprise Server 11 SP2:NetworkManager SUSE Linux Enterprise Server 11 SP2:NetworkManager-glib SUSE Linux Enterprise Server 11 SP3:NetworkManager SUSE Linux Enterprise Server 11 SP3:NetworkManager-glib SUSE Linux Enterprise Server 12:NetworkManager SUSE Linux Enterprise Server 12:libnm-glib-vpn1 SUSE Linux Enterprise Server 12:libnm-glib4 SUSE Linux Enterprise Server 12:libnm-util2 SUSE Linux Enterprise Server 12:typelib-1_0-NMClient-1_0 SUSE Linux Enterprise Server 12:typelib-1_0-NetworkManager-1_0 SUSE Linux Enterprise Software Development Kit 11 SP2:NetworkManager SUSE Linux Enterprise Software Development Kit 11 SP2:NetworkManager-devel SUSE Linux Enterprise Software Development Kit 11 SP3:NetworkManager SUSE Linux Enterprise Software Development Kit 11 SP3:NetworkManager-devel SUSE Linux Enterprise Software Development Kit 12:NetworkManager SUSE Linux Enterprise Software Development Kit 12:NetworkManager-devel moderate 4.6 AV:L/AC:L/Au:N/C:P/I:P/A:P