In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode, it created an open/insecure network.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In NetworkManager 0.9.2.0, when a new wireless network was created with WPA/WPA2 security in AdHoc mode,     it created an open/insecure network. (CVE-2012-2736)

Note that Nessus relies on the presence of the package as reported by the vendor.

The broken AdHoc WPA mode was disabled in NetworkManager, which would have created an open network instead. (CVE-2012-2736)

USN-1483-1 fixed a vulnerability in NetworkManager by disabling the creation of WPA-secured AdHoc wireless connections. This update provides the corresponding change for network-manager-applet.

It was discovered that certain wireless drivers incorrectly handled the creation of WPA-secured AdHoc connections. This could result in AdHoc wireless connections being created without any security at all.
This update removes WPA as a security choice for AdHoc connections in NetworkManager.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

It was discovered that certain wireless drivers incorrectly handled the creation of WPA-secured AdHoc connections. This could result in AdHoc wireless connections being created without any security at all.
This update removes WPA as a security choice for AdHoc connections in NetworkManager.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
217571	Linux Distros Unpatched Vulnerability : CVE-2012-2736	Nessus	Misc.	medium
74746	openSUSE Security Update : NetworkManager (openSUSE-SU-2012:1151-1)	Nessus	SuSE Local Security Checks	medium
59755	Ubuntu 10.04 LTS / 11.04 / 11.10 : network-manager-applet vulnerability (USN-1483-2)	Nessus	Ubuntu Local Security Checks	medium
59754	Ubuntu 10.04 LTS / 11.04 / 11.10 : network-manager vulnerability (USN-1483-1)	Nessus	Ubuntu Local Security Checks	medium

Detections

Analytics

CVE-2012-2736

medium

Tenable Plugins

medium

medium

medium

medium