CVE-2011-2176
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit,...
CVE-2011-2176 is a low vulnerability (CVSS 2.1) in Gnome Networkmanager, published September 2, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 25th percentile. Fixed in network-manager 0.9.0-1.
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
CVE-2011-2176- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-287
- Updated
- 2026-11-02
CVE List No score
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
CVE-2011-2176- Updated
- 2026-11-02
EUVDEUVD-2011-2168 No score
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
EUVD-2011-2168- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-56gg-mvcc-wv2j No score
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit,...
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
GHSA-56gg-mvcc-wv2j- Weakness
- CWE-287
- Updated
- 2026-11-02
OSV No score
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
CVE-2011-2176- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-2176 No score
GNOME NetworkManager before 0.8.6 does not properly enforce the auth_admin element in PolicyKit, which allows local users to bypass intended wireless network sharing restrictions via unspecified vectors.
- Record
DEBIAN-CVE-2011-2176- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
network-managerDebian:12 |
before 0.9.0-1 | 0.9.0-1 |
network-managerDebian:13 |
before 0.9.0-1 | 0.9.0-1 |
network-managerDebian:14 |
before 0.9.0-1 | 0.9.0-1 |
NetworkManagerRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
NetworkManager-debuginfoRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
NetworkManager-glibRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
NetworkManager-gnomeRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
NetworkManager-develRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
NetworkManager-glib-develRed Hat:enterprise_linux:6::server |
before 1:0.8.1-9.el6_1.1 | 1:0.8.1-9.el6_1.1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
cgit.freedesktop.org/NetworkManager/NetworkManager/plain/NEWS?h=NM_0_8
securitytracker.com/id?1025711
lists.fedoraproject.org/pipermail/package-announce/2011-August/063665.html
redhat.com/support/errata/RHSA-2011-0930.html
bugzilla.redhat.com/show_bug.cgi?id=709662
mandriva.com/security/advisories?name=MDVSA-2011:171
Show 9 moreShow less
secunia.com/advisories/44858
nvd.nist.gov/vuln/detail/CVE-2011-2176
github.com/advisories/GHSA-56gg-mvcc-wv2j
security-tracker.debian.org/tracker/CVE-2011-2176
access.redhat.com/errata/RHSA-2011:0930
security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0930.json
cve.org/CVERecord?id=CVE-2011-2176