Login screen can display password
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
gdm (Ubuntu) |
Invalid
|
Undecided
|
Unassigned |
Bug Description
Hi
I have noticed that under certain conditions the login screen can display part of the user's password. I have marked this as a security issue because this bug could result in a third party being able to read this, especially if the user doesn't look at the screen as (s)he is typing (as a lot of people do) as they risk only noticing when it is too late. Here is how I can reproduce this bug:
1) Type in some numbers in the numeric keyboard with the num lock off. The cursor doesn't move
2) Now type letters or symbols. These are displayed in the password box
ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gdm (not installed)
ProcVersionSign
Uname: Linux 3.0.0-11-generic x86_64
NonfreeKernelMo
ApportVersion: 1.23-0ubuntu1
Architecture: amd64
Date: Sun Sep 25 10:05:34 2011
ProcEnviron:
PATH=(custom, no user)
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: gdm
UpgradeStatus: No upgrade log present (probably fresh install)
I have not been able to reproduce this bug for a couple of weeks now.