*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
In Xubuntu 11.10, the user can edit network connections (e.g.,
passwords, security settings, MAC address) w/o the need for root
password.
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: network-manager-gnome 0.9.1.90-0ubuntu6
ProcVersionSignature: Ubuntu 3.0.0-12.20-generic 3.0.4
Uname: Linux 3.0.0-12-generic i686
ApportVersion: 1.23-0ubuntu3
Architecture: i386
CRDA: Error: [Errno 2] No such file or directory
Date: Sun Oct 23 10:00:30 2011
ExecutablePath: /usr/bin/nm-connection-editor
IfupdownConfig:
auto lo
iface lo inet loopback
InstallationMedia: Xubuntu 11.04 "Natty Narwhal" - Release i386 (20110427)
IpRoute:
default via 192.168.123.254 dev wlan0 proto static
169.254.0.0/16 dev wlan0 scope link metric 1000
192.168.123.0/24 dev wlan0 proto kernel scope link src 192.168.123.181
metric 2
NetworkManager.state:
[main]
NetworkingEnabled=true
WirelessEnabled=true
WWANEnabled=true
ProcEnviron:
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: network-manager-applet
UpgradeStatus: Upgraded to oneiric on 2011-10-13 (9 days ago)
XsessionErrors:
(xfce4-indicator-plugin:1534): Gtk-CRITICAL **: IA__gtk_widget_set_name:
assertion `GTK_IS_WIDGET (widget)' failed
(xfce4-indicator-plugin:1534): libindicator-WARNING **: IndicatorObject class
does not have an accessible description.
(xfce4-indicator-plugin:1534): libindicator-WARNING **: IndicatorObject class
does not have an accessible description.
(xfce4-indicator-plugin:1534): libxfce4panel-CRITICAL **:
IA__xfce_panel_plugin_add_action_widget: assertion `GTK_IS_WIDGET (widget)'
failed
(xfce4-indicator-plugin:1534): Gtk-CRITICAL **: IA__gtk_widget_realize:
assertion `GTK_WIDGET_ANCHORED (widget) || GTK_IS_INVISIBLE (widget)' failed
** Affects: network-manager-applet (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-bug i386 oneiric
--
User can edit network connections w/o root password
https://bugs.launchpad.net/bugs/880231
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
