O.K. It really seems to be an interference with sprintf's conversion
specifiers. 'foo%bar" is working because there is no '%b' specifier.
'foo%xbar', foo%ebar', 'foo%fbar', etc. are not working, because these
are conversion specifiers.

This means it is almost certainly exploitable somehow.

-- 
policykit or policykit-gome do not work with passwords containing "%" character
https://bugs.launchpad.net/bugs/205037
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to