visible passwd bug in kdm ?

From: Sascha Runschke (deckerat_private)
Date: Wed Dec 10 1997 - 13:48:49 PST

  • Next message: Aleph One: "Re: Yahoo hacked"

    -----BEGIN PGP SIGNED MESSAGE-----
    
    
    Hi,
    
    it seems that there is a bug in the login procedure of the kdm environment.
    If you type your passwd when prompted for it and afterwards try to mark the
    invisible passwd with the mouse, it suddenly becomes visible.
    
    I don't think it's that dangerous, but there might be a situation where you
    cannot end your login-sequence and someone else is able to access your
    station.
    
    I did not check the code yet, because I do not use kdm. But maybe
    I'll have a look later.
    
    This bug was reported by asat_private in de.comp.os.linux.x
    Message-ID: <x47m9dwee7.fsfat_private-sb.de>
    
    regards
            sascha
    
    - --
    Sascha Runschke                           eMail : deckerat_private
    Tel: +49-(0)177-2767693                           IRCNet,EFNet : Decker
            ## Linux 2.0 - The choice of the new generation ##
    -----BEGIN PGP SIGNATURE-----
    Version: 2.6.3in
    Charset: latin1
    
    iQCVAwUBNI8OOw5fVlcX77C1AQFdGAQA1Jq1Cajigge0LxBHFq7tXrtuNWtcArT2
    ZrEXCThi9hhHOvqnRMNoqpxdrEBoHUB7x79u3qjPVBfMqz/Lday5mrjppitxyb9B
    tAdlyU7IKA4eFaUovAuD5IMOpGycDfmg8YUGa61TW2jcMKFshz7K5MAQCJpqASHM
    1MIPfeeVnAM=
    =Qr4x
    -----END PGP SIGNATURE-----
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 13:35:27 PDT