Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 15 Jun 2012 07:43:19 +0200
From: Yves-Alexis Perez <>
Cc: Huzaifa Sidhpurwala <>
Subject: Re: CVE Request: NetworkManager creates an open
 network when asked to create an adhoc-WPA network

On jeu., 2012-06-14 at 22:52 -0600, Kurt Seifried wrote:
> On 06/14/2012 10:28 PM, Huzaifa Sidhpurwala wrote:
> > Hi All,
> > 
> > In NetworkManager, when a new wireless network was created with 
> > WPA/WPA2 security, it created an open/insecure network. From the
> > commit, it seems the bug exists in the kernel.
> > 
> > Reference: 
> > 
> >
> >
> >  The patch disables WPA adhoc networks completely untill a better 
> > solution is found.
> > 
> > Can a CVE id be please assigned to this issue?
> Please use CVE-2012-2736 for this issue.

And shouldn't something been done on the kernel part? I'm not sure how
it behaves but if it silently create an open ad-hoc connection while it
was requested a wpa one by the application, that looks like something
warranting a CVE too.


Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.