*** This bug is a security vulnerability ***

You have been subscribed to a public security bug by Marc Deslauriers 
(mdeslaur):

NetworkManager supports checking the radius certificates used within 802.1X 
Infrastructures. 
These Options are "subject-match" and "phase2-subject-match".
However is these options are set the are read by networkmanager at connection 
activation, but is silently ignored.
Even if the String supplied by this option is known wrong the connection can be 
established.

This is a bis isues within wide spread WPA2-Infrastructures like
"eduroam" where SSID on the network is well known.

This issue exist in pakage Network-manager 0.9.8.8-0ubuntu7 
(amd64)

In other distributions like Debian 7.6 (network-mamanger 0.9.4.0-10) the
option is working well.

** Affects: network-manager (Ubuntu)
     Importance: Undecided
         Status: New

-- 
option "subject-match" not working
https://bugs.launchpad.net/bugs/1365020
You received this bug notification because you are a member of Ubuntu Bugs, 
which is subscribed to the bug report.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to