*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
Binary package hint: abiword
$HOME/.AbiSuite/AbiCollab.profile contains your passwords in plain text.
Now, admittedly, .AbiSuite has mode 0700 permissions, so it isn't _too_ bad,
but it's right there in an XML <password> tag. Not even a little security
through obscurity.
ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: abiword 2.8.2-2ubuntu1.1
ProcVersionSignature: Ubuntu 2.6.32-25.44-generic 2.6.32.21+drm33.7
Uname: Linux 2.6.32-25-generic x86_64
Architecture: amd64
Date: Thu Nov 4 17:51:32 2010
InstallationMedia: Ubuntu 10.04.1 LTS "Lucid Lynx" - Release amd64 (20100816.1)
ProcEnviron:
PATH=(custom, user)
LANG=en_GB.UTF-8
SHELL=/bin/bash
SourcePackage: abiword
** Affects: abiword (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug lucid
--
Abiword collaboration stores passwords in plain text
https://bugs.edge.launchpad.net/bugs/671064
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
