[Desktop-packages] [Bug 14392] Re: [network-admin] WEP key stored in world-readable /etc/network/interfaces
I am marking this bug as confirmed because it has been confirmed in many duplicates. ** Changed in: netcfg (Ubuntu) Status: New = Confirmed -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-system-tools in Ubuntu. https://bugs.launchpad.net/bugs/14392 Title: [network-admin] WEP key stored in world-readable /etc/network/interfaces Status in “gnome-system-tools” package in Ubuntu: Fix Released Status in “netcfg” package in Ubuntu: Confirmed Status in “gnome-system-tools” package in Debian: Incomplete Bug description: the WEP key is stored in cleartext in /etc/network/interfaces and the file has mode 644. I'd consider this a security breach. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-system-tools/+bug/14392/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 14392] Re: [network-admin] WEP key stored in world-readable /etc/network/interfaces
against netcfg. Needs testing. ** Package changed: wireless-tools (Ubuntu) = netcfg (Ubuntu) ** Changed in: netcfg (Ubuntu) Status: Invalid = New ** Patch added: proposed patch https://bugs.launchpad.net/ubuntu/+source/netcfg/+bug/14392/+attachment/3896114/+files/file-mode.patch -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-system-tools in Ubuntu. https://bugs.launchpad.net/bugs/14392 Title: [network-admin] WEP key stored in world-readable /etc/network/interfaces Status in “gnome-system-tools” package in Ubuntu: Fix Released Status in “netcfg” package in Ubuntu: New Status in “gnome-system-tools” package in Debian: Incomplete Bug description: the WEP key is stored in cleartext in /etc/network/interfaces and the file has mode 644. I'd consider this a security breach. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-system-tools/+bug/14392/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 14392] Re: [network-admin] WEP key stored in world-readable /etc/network/interfaces
The attachment proposed patch seems to be a patch. If it isn't, please remove the patch flag from the attachment, remove the patch tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team. [This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.] ** Tags added: patch -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-system-tools in Ubuntu. https://bugs.launchpad.net/bugs/14392 Title: [network-admin] WEP key stored in world-readable /etc/network/interfaces Status in “gnome-system-tools” package in Ubuntu: Fix Released Status in “netcfg” package in Ubuntu: New Status in “gnome-system-tools” package in Debian: Incomplete Bug description: the WEP key is stored in cleartext in /etc/network/interfaces and the file has mode 644. I'd consider this a security breach. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-system-tools/+bug/14392/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
[Desktop-packages] [Bug 14392] Re: [network-admin] WEP key stored in world-readable /etc/network/interfaces
I found that after doing a fresh install of 13.10 server, the wpa passphrase for the network used during install was stored in plain text in /etc/network/interfaces and by default the file has 644 permissions. As stated by the original creator, this is a potential security risk. -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to gnome-system-tools in Ubuntu. https://bugs.launchpad.net/bugs/14392 Title: [network-admin] WEP key stored in world-readable /etc/network/interfaces Status in “gnome-system-tools” package in Ubuntu: Fix Released Status in “wireless-tools” package in Ubuntu: Invalid Status in “gnome-system-tools” package in Debian: Incomplete Bug description: the WEP key is stored in cleartext in /etc/network/interfaces and the file has mode 644. I'd consider this a security breach. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gnome-system-tools/+bug/14392/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : desktop-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
