A security flaw was found in the way NetworkManager, a network connections manager, and wpa_supplicant, a WPA/WPA2/IEEE 802.1X supplicant, performed system file paths sanitization for x509v3 certificate and private key files, used for connection to trusted networks. A local attacker, with the privilege to add new network connection, could use this flaw to read arbitrary system files.
Acknowledgements: Red Hat would like to thank Ludwig Nussel of the SUSE security team for reporting this issue.
Public via: [1] http://www.openwall.com/lists/oss-security/2012/02/29/2
Created NetworkManager tracking bugs for this issue Affects: fedora-all [bug 799202]
*** Bug 799194 has been marked as a duplicate of this bug. ***
We expect this to be fixed upstream in a future release.