CVE-2015-1322

Ubuntu network-manager <0.9.10.0-4ubuntu15.1, 14.10 <0.9.8.8-0ubunt...

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before 0.9.8.8-0ubuntu28.1, and Ubuntu 14.04 LTS before 0.9.8.8-0ubuntu7.1 allows local users to change the modem device configuration or read arbitrary files via a .. (dot dot) in the file name in a request to read modem device contexts (com.canonical.NMOfono.ReadImsiContexts).

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-2581-1

Scores

EPSS 0.0053
EPSS Percentile 41.2%

Details

CWE
CWE-22
Status published
Products (4)
canonical/ubuntu_linux 14.04
canonical/ubuntu_linux 14.10
canonical/ubuntu_linux 15.1
ubuntu/network-manager < 0.9.8.7
Published Apr 29, 2015
Tracked Since Feb 18, 2026