CVE-2015-1322

Publication date 28 April 2015

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local users to change the modem device configuration or read arbitrary files via a .. (dot dot) in the file name in a request to read modem device contexts (com.canonical.NMOfono.ReadImsiContexts).

Read the notes from the security team

Status

Package Ubuntu Release Status
network-manager 15.04 vivid
Fixed 0.9.10.0-4ubuntu15.1
14.10 utopic
Fixed 0.9.8.8-0ubuntu28.1
14.04 LTS trusty
Fixed 0.9.8.8-0ubuntu7.1
12.04 LTS precise
Not affected
10.04 LTS lucid Ignored end of life

Notes

mdeslaur

issue in ubuntu-specific ofono integration patch

References

Related Ubuntu Security Notices (USN)

    • USN-2581-1
    • NetworkManager vulnerability
    • 28 April 2015

Other references