*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Seth Arnold (seth-arnold):
I was doing a fresh install of 12.04 on my desktop PC, which is
connected to my home network. I have installed the Gnome3 classic
desktop environment, and while doing some configurations, I decided to
disconnect from the network in order to protect my PC while it is still
in a vulnerable state. (I have noticed for some time before that one of
the other PC's on the LAN, with a Win 7 OS, is somewhat noisy on the
network).
When installing the System Monitor applet, I also activated the Network
portion, taking samples at 1.5 second intervals on the network
connection, and producing a small graph (60 pixels wide) showing the
network traffic. I then noticed that traffic was still getting through
at a rate of 40 bytes/sec on the now "disconnected" wired connection.
I then did a few tests, and found:
- for some reason there is also the option of "Disabling" the network on the
applet.
- both "Disconnect" and "Disable" produce the same message "Disconnected - you
are now offline".
- "Disconnecting" the wired connection, with the network "Enabled" still allows
slow traffic through, however browsing the Internet and downloading is not
possible.
- "Disabling" the network, without disconnecting the connection, stops all
traffic.
This is a security flaw, since "Disconnecting" the LAN should have the
same effect as unplugging the LAN cable from the network port, thus not
allowing any traffic to get through.
The attached screenshots show that for a period of 2 minutes 45 seconds,
my PC have received 109 packets (6.4 kB) and sent 2 packets (0.2 kB),
while being "disconnected".
When clicking on the network applet icon, I see the following
lines/options:
Wired network
Wired connection 1
Disconnect
VPN connections
Enable Networking (Checked)
Connection Information
Edit Connections
I suspect that the disconnect/disable anomaly is the result of
installing Gnome3 over Unity.
** Affects: network-manager-applet (Ubuntu)
Importance: Undecided
Status: New
** Tags: 12.04 applet gnome3 network
--
Slow traffic pass through "disconnected" wired connection
https://bugs.launchpad.net/bugs/1090543
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
