*** This bug is a security vulnerability ***

You have been subscribed to a public security bug:

Corrected copy and pasted info Nov. 17th.

If written quickly after a failed attempt xfce4-terminal shows password
visibly in actual characters and accepts the password.

Example (the word "pass" is the password):


brett@BrettPC:~$ sudo su
[sudo] password for brett:
pass
Sorry, try again.
[sudo] password for brett:
root@BrettPC:/home/brett#

To clarify I did not enter a password the second time it sad "[sudo]
password for brett:" it simply accepted the one shown visibly.

** Affects: sudo (Ubuntu)
     Importance: Undecided
     Assignee: Andrew Donald (senoir-cielo)
         Status: New

-- 
xfce4-terminal shows password visibly in clear between attempts and accepts 
(updated Nov. 17th)
https://bugs.launchpad.net/bugs/1641259
You received this bug notification because you are a member of Ubuntu Touch 
seeded packages, which is subscribed to sudo in Ubuntu.

-- 
Mailing list: https://launchpad.net/~touch-packages
Post to     : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to