CVE-2011-3364

CVE-2011-3364 describes an incomplete blacklist vulnerability in the svEscape function of the ifcfg-rh plug-in for GNOME NetworkManager versions 0.9.1, 0.9.0, and 0.8.1. This flaw allows local users to execute arbitrary commands by injecting a newline character into a new network connection's name, which is then improperly written to the ifcfg file. The vulnerability has a CVSS score of 6.9, indicating a high severity with local access and medium attack complexity, leading to potential complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.