*** This bug is a security vulnerability ***

Public security bug reported:

When switching from user A to user B, and back to user A, I have to enter user 
A's password. 
This unlocks the screensaver/login window just fine, but it also enters user 
A's password in plain text into the window that had focus when the switch from 
user A to user B was made.
For example, when I open a console, switch from A to B and from B to A, and 
enter the password, the password is also entered into the console window, 
together with the ENTER keystroke, thereby attempting to execute my password as 
a command.
Obviously this is a huge security issue.

Description:    Ubuntu 12.10
Release:        12.10

** Affects: gnome-screensaver (Ubuntu)
     Importance: Undecided
         Status: New

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-screensaver in Ubuntu.
https://bugs.launchpad.net/bugs/1154008

Title:
  Password visible after user switch

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/gnome-screensaver/+bug/1154008/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to