http://qa.mandrakesoft.com/show_bug.cgi?id=4912
Product: gnome-control-center
Component: program
Summary: Security issue: gnome-network-preferences advanced shows
password in the clear
Product: gnome-control-center
Version: 2.3.5-1mdk
Platform: PC
OS/Version: All
Status: UNCONFIRMED
Severity: major
Priority: P2
Component: program
AssignedTo: [EMAIL PROTECTED]
ReportedBy: [EMAIL PROTECTED]
Run gnome-network-preferences, hit the details button, and you will get a dialog
with "use authentication" checkbox, which enables the "username" and "password"
text fields. Check the checkbox, enter a password, and you will see it is in the
clear.
This is a serious security issue, passwords should never be displayed in the
clear (in my case, we use single sign-on, my proxy password is my LDAP account
password, which has higher priveleges than most users).
[also, there are no proxy exclusion settings, which is why I avoid using GNOME
applications for internet access as even local traffic goes through our
expensive upstream proxy]
--
Configure bugmail: http://qa.mandrakesoft.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.
