Unscored severity · published Aug 1, 2005
CVE-2005-2410
Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Format string vulnerability in the nm_info_handler function in Network Manager may allow remote attackers to execute arbitrary code via format string specifiers in a Wireless Access Point identifier, which is not properly handled in a syslog call.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Networkmanager · Gnome
before 0.4.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2410
Third Party Advisory
http://lwn.net/Alerts/145678/
Mailing List
http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00196.html
Mailing List
http://mail.gnome.org/archives/networkmanager-list/2005-July/msg00197.html
More from Networkmanager
7.5
CVE-2018-1000135
GNOME NetworkManager version 1.10.2 and earlier contains a Information Exposure (CWE-200) vulnerability in DNS resolver that can result in Private DNS queries leaked to local…
6.8
CVE-2006-7246
NetworkManager 0.9.x does not pin a certificate's subject to an ESSID when 802.11X authentication is used
5.5
CVE-2021-20297
A flaw was found in NetworkManager in versions before 1.30.0
5.5
CVE-2012-1096
NetworkManager 0.9 and earlier allows local users to use other users' certificates or private keys when making a connection via the file path when adding a new connection
4.4
CVE-2012-2736
In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network