{"id":"USN-3217-1","aliases":[],"status":"published","title":"network-manager-applet vulnerability","description":"Frederic Bardy and Quentin Biguenet discovered that network-manager-applet incorrectly checked\npermissions when connecting to certain wireless networks. A local attacker\ncould use this issue at the login screen to access local files.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-03-07T17:32:32Z","modified":"2026-04-22T09:31:56Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"network-manager-applet","fixed_in":["0.9.8.8-0ubuntu4.5"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"network-manager-applet","fixed_in":["1.2.6-0ubuntu0.16.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"network-manager-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.8.8-0ubuntu4.5"}]}],"versions":["0.9.8.0-1ubuntu5","0.9.8.0-1ubuntu6","0.9.8.0-1ubuntu7","0.9.8.4-1ubuntu1","0.9.8.4-1ubuntu2","0.9.8.4-1ubuntu3","0.9.8.8-0ubuntu1","0.9.8.8-0ubuntu2","0.9.8.8-0ubuntu3","0.9.8.8-0ubuntu4","0.9.8.8-0ubuntu4.1","0.9.8.8-0ubuntu4.2","0.9.8.8-0ubuntu4.3","0.9.8.8-0ubuntu4.4"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"network-manager-applet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-0ubuntu0.16.04.2"}]}],"versions":["0.9.10.1-0ubuntu7","1.0.4-0ubuntu1","1.0.6-2ubuntu2","1.0.6-2ubuntu3","1.0.6-2ubuntu4","1.0.10-1ubuntu1","1.1.93-1ubuntu1","1.2.0-0ubuntu0.16.04.1","1.2.0-0ubuntu0.16.04.3","1.2.0-0ubuntu0.16.04.4","1.2.6-0ubuntu0.16.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3217-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1668321","tags":["report"]}],"sources":{"osv":[{"id":"USN-3217-1","title":"network-manager-applet vulnerability","description":"Frederic Bardy and Quentin Biguenet discovered that network-manager-applet incorrectly checked\npermissions when connecting to certain wireless networks. A local attacker\ncould use this issue at the login screen to access local files.\n","status":"published","published":"2017-03-07T17:32:32Z","modified":"2026-04-22T09:31:56.559531Z","updated_at":"2026-11-02T16:58:10.303275Z"}]}}