Date: Fri, 15 Jun 2012 07:43:19 +0200 From: Yves-Alexis Perez <corsac@...ian.org> To: oss-security@...ts.openwall.com Cc: Huzaifa Sidhpurwala <huzaifas@...hat.com> Subject: Re: CVE Request: NetworkManager creates an open network when asked to create an adhoc-WPA network On jeu., 2012-06-14 at 22:52 -0600, Kurt Seifried wrote: > On 06/14/2012 10:28 PM, Huzaifa Sidhpurwala wrote: > > Hi All, > > > > In NetworkManager, when a new wireless network was created with > > WPA/WPA2 security, it created an open/insecure network. From the > > commit, it seems the bug exists in the kernel. > > > > Reference: https://bugzilla.redhat.com/show_bug.cgi?id=782627 > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655972 > > http://cgit.freedesktop.org/NetworkManager/NetworkManager/commi/?id=69247a00eacd00617acbf1dfcee8497437b8ad39 > > > > The patch disables WPA adhoc networks completely untill a better > > solution is found. > > > > Can a CVE id be please assigned to this issue? > > Please use CVE-2012-2736 for this issue. > > And shouldn't something been done on the kernel part? I'm not sure how it behaves but if it silently create an open ad-hoc connection while it was requested a wpa one by the application, that looks like something warranting a CVE too. Regards, -- Yves-Alexis Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.