2012-12-17 19:18:55 |
Tony Espy |
bug |
|
|
added bug |
2012-12-17 19:21:37 |
Tony Espy |
attachment added |
|
system-connections file showing invalid WEP key https://bugs.launchpad.net/manhattan/+bug/1091391/+attachment/3462351/+files/hyperion |
|
2012-12-17 20:37:11 |
Ricardo Salveti |
manhattan: status |
New |
Confirmed |
|
2013-01-30 23:10:15 |
Tony Espy |
summary |
[network-indicator] No Validation of Wi-Fi Key/Passphrases is performed |
[indicators] [network] No Validation of Wi-Fi Key/Passphrases is performed |
|
2013-02-03 14:13:10 |
Bill Filler |
manhattan: assignee |
|
Alberto Ruiz (alberto.ruiz) |
|
2013-02-03 14:13:21 |
Bill Filler |
manhattan: milestone |
|
update-1 |
|
2013-02-03 14:13:31 |
Bill Filler |
manhattan: importance |
Undecided |
Medium |
|
2013-03-01 00:46:46 |
Bill Filler |
manhattan: milestone |
update-1 |
update-2 |
|
2013-07-08 20:49:11 |
Tony Espy |
tags |
|
wifi |
|
2013-07-08 20:50:58 |
Tony Espy |
manhattan: assignee |
Alberto Ruiz (alberto.ruiz) |
|
|
2013-07-08 20:58:21 |
Tony Espy |
manhattan: milestone |
ubuntu-13.04-month-5 |
|
|
2013-07-08 20:58:32 |
Tony Espy |
information type |
Proprietary |
Public |
|
2013-07-08 20:58:44 |
Tony Espy |
affects |
manhattan |
touch-preview-images |
|
2013-09-16 15:00:17 |
Mathieu Trudel-Lapierre |
bug task added |
|
indicator-network (Ubuntu) |
|
2013-09-16 15:00:23 |
Mathieu Trudel-Lapierre |
indicator-network (Ubuntu): importance |
Undecided |
Medium |
|
2013-09-16 15:00:25 |
Mathieu Trudel-Lapierre |
touch-preview-images: status |
Confirmed |
Triaged |
|
2013-09-16 15:00:27 |
Mathieu Trudel-Lapierre |
indicator-network (Ubuntu): status |
New |
Triaged |
|
2013-09-16 15:00:41 |
Mathieu Trudel-Lapierre |
indicator-network (Ubuntu): assignee |
|
Ted Gould (ted) |
|
2013-09-16 15:00:49 |
Mathieu Trudel-Lapierre |
touch-preview-images: assignee |
|
Mathieu Trudel-Lapierre (mathieu-tl) |
|
2013-09-16 15:39:26 |
Ted Gould |
indicator-network (Ubuntu): assignee |
Ted Gould (ted) |
Pete Woods (pete-woods) |
|
2013-09-16 15:39:32 |
Ted Gould |
indicator-network (Ubuntu): status |
Triaged |
In Progress |
|
2013-09-16 15:40:27 |
Ted Gould |
indicator-network (Ubuntu): assignee |
Pete Woods (pete-woods) |
Ted Gould (ted) |
|
2013-10-15 20:46:18 |
Ted Gould |
indicator-network (Ubuntu): status |
In Progress |
Triaged |
|
2013-10-15 20:46:22 |
Ted Gould |
indicator-network (Ubuntu): assignee |
Ted Gould (ted) |
|
|
2013-10-15 20:46:32 |
Ted Gould |
bug task added |
|
indicator-network |
|
2013-10-15 20:46:41 |
Ted Gould |
indicator-network: status |
New |
Triaged |
|
2013-10-15 20:46:44 |
Ted Gould |
indicator-network: importance |
Undecided |
Medium |
|
2013-10-18 09:15:43 |
Matthew Paul Thomas |
indicator-network (Ubuntu): assignee |
|
Matthew Paul Thomas (mpt) |
|
2014-04-03 13:32:39 |
Antti Kaijanmäki |
indicator-network (Ubuntu): assignee |
Matthew Paul Thomas (mpt) |
Antti Kaijanmäki (kaijanmaki) |
|
2014-04-03 13:32:43 |
Antti Kaijanmäki |
touch-preview-images: assignee |
Mathieu Trudel-Lapierre (mathieu-tl) |
Antti Kaijanmäki (kaijanmaki) |
|
2014-04-03 13:32:47 |
Antti Kaijanmäki |
indicator-network: assignee |
|
Antti Kaijanmäki (kaijanmaki) |
|
2014-07-01 16:25:45 |
Bill Filler |
bug task deleted |
touch-preview-images |
|
|
2015-03-26 10:56:28 |
Pete Woods |
bug task deleted |
indicator-network |
|
|
2015-06-03 10:16:33 |
Antti Kaijanmäki |
indicator-network (Ubuntu): status |
Triaged |
Incomplete |
|
2015-06-03 10:16:36 |
Antti Kaijanmäki |
indicator-network (Ubuntu): importance |
Medium |
Wishlist |
|
2015-06-03 10:17:06 |
Antti Kaijanmäki |
indicator-network (Ubuntu): assignee |
Antti Kaijanmäki (kaijanmaki) |
|
|
2015-06-03 10:17:27 |
Antti Kaijanmäki |
bug task added |
|
ubuntu-ux |
|
2015-06-04 09:48:57 |
Magdalena Mirowicz |
ubuntu-ux: status |
New |
Triaged |
|
2015-06-04 09:49:42 |
Magdalena Mirowicz |
ubuntu-ux: assignee |
|
Paty Davila (dizzypaty) |
|
2015-06-04 16:18:55 |
Antti Kaijanmäki |
indicator-network (Ubuntu): status |
Incomplete |
Triaged |
|
2015-06-15 14:33:15 |
Matthew Paul Thomas |
bug task deleted |
ubuntu-ux |
|
|
2015-06-15 14:35:44 |
Matthew Paul Thomas |
description |
The current network indicator does no checking of Wi-Fi key or passphrases, and thus allows a user to enter an invalid key or passphrase and initiate a connection attempt.
For access points using WEP, there are four valid key lengths:
* 5 ASCII characters or 10 hex characters
* 13 ASCII characters or 26 hex characters
For APs using WPA Personal/PSK, a valid passphrase can be between 8 and 63 characters in length. A full 256-bit key can be specified by entering 64 hex characters.
Note, the chewie server should also probably do some validation as well. It shouldn't be possible for a new network to be created with a single character key ( see attached file ).
Steps to Reproduce:
1. Open the network menu and select an access point known to be using WEP security
2. Enter a 1 character key
3. Click OK
Expected Result:
The user cannot initiate a connection with an invalid key.
Actual Result:
The auth dialog is dismissed and the user appears connected ( note, this is another problem )
Build Details:
Manhattan/Maguro #160
chewie: 0.2.6~quantal1
indicators-client-plugin-network: 0.20~quantal1 |
The current network indicator does no checking of Wi-Fi key or passphrases, and thus allows a user to enter an invalid key or passphrase and initiate a connection attempt.
For access points using WEP, there are four valid key lengths:
* 5 ASCII characters or 10 hex characters
* 13 ASCII characters or 26 hex characters
<https://wiki.ubuntu.com/Networking#wi-fi-authentication-variations>: "“Connect Anyway” should be insensitive whenever the “Password:” field does not contain 5 or 10 Ascii characters, or 13 or 26 hexadecimal characters. The error color should be used to highlight any non-Ascii characters regardless of length, and any non-hexadecimal characters whenever there are 12 or more characters (such that you’re more likely to be aiming for 13 or 26 than for 5 or 10)."
For APs using WPA Personal/PSK, a valid passphrase can be between 8 and 63 characters in length. A full 256-bit key can be specified by entering 64 hex characters.
<https://wiki.ubuntu.com/Networking#wi-fi-authentication-variations>: "“Connect” should be insensitive whenever the “Password:” field contains fewer than 8 characters, more than 64 characters, or exactly 64 characters where any of them are not hexadecimal. Whenever there are exactly 64 characters, any non-hexadecimal characters should be highlighted in the error color."
Note, the chewie server should also probably do some validation as well. It shouldn't be possible for a new network to be created with a single character key ( see attached file ).
Steps to Reproduce:
1. Open the network menu and select an access point known to be using WEP security
2. Enter a 1 character key
3. Click OK
Expected Result:
The user cannot initiate a connection with an invalid key.
Actual Result:
The auth dialog is dismissed and the user appears connected ( note, this is another problem )
Build Details:
Manhattan/Maguro #160
chewie: 0.2.6~quantal1
indicators-client-plugin-network: 0.20~quantal1 |
|