*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Jamie Strandboge
(jdstrand):
Binary package hint: sudo
When using a sudo command in the ssh command line option, the password
is not masked (it is displayed on the screen as it is typed.
E.g.:
ssh mydesktop sudo poweroff
When sudo prompts for a password, it is displayed on the screen. This is
a security vulnerability as anyone looking at the screen would be able
to read the sudoers password (effectively this will allow them root
access).
This bug is present in Hardy and Intrepid.
** Affects: sudo (Ubuntu)
Importance: Undecided
Status: New
** Tags: password ssh sudo
--
Sudo Password Is Not Masked When Run As SSH Command
https://bugs.launchpad.net/bugs/307702
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
