*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Marc Deslauriers
(mdeslaur):
Hi
I have noticed that under certain conditions the login screen can display part
of the user's password. I have marked this as a security issue because this bug
could result in a third party being able to read this, especially if the user
doesn't look at the screen as (s)he is typing (as a lot of people do) as they
risk only noticing when it is too late. Here is how I can reproduce this bug:
1) Type in some numbers in the numeric keyboard with the num lock off. The
cursor doesn't move
2) Now type letters or symbols. These are displayed in the password box
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gdm (not installed)
ProcVersionSignature: Ubuntu 3.0.0-11.18-generic 3.0.4
Uname: Linux 3.0.0-11-generic x86_64
NonfreeKernelModules: fglrx
ApportVersion: 1.23-0ubuntu1
Architecture: amd64
Date: Sun Sep 25 10:05:34 2011
ProcEnviron:
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: gdm
UpgradeStatus: No upgrade log present (probably fresh install)
** Affects: gdm (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug oneiric running-unity
--
Login screen can display password
https://bugs.launchpad.net/bugs/858725
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
