Login screen can display password

Bug #858725 reported by James Pursey
260
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gdm (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

Hi

I have noticed that under certain conditions the login screen can display part of the user's password. I have marked this as a security issue because this bug could result in a third party being able to read this, especially if the user doesn't look at the screen as (s)he is typing (as a lot of people do) as they risk only noticing when it is too late. Here is how I can reproduce this bug:
1) Type in some numbers in the numeric keyboard with the num lock off. The cursor doesn't move
2) Now type letters or symbols. These are displayed in the password box

ProblemType: Bug
DistroRelease: Ubuntu 11.10
Package: gdm (not installed)
ProcVersionSignature: Ubuntu 3.0.0-11.18-generic 3.0.4
Uname: Linux 3.0.0-11-generic x86_64
NonfreeKernelModules: fglrx
ApportVersion: 1.23-0ubuntu1
Architecture: amd64
Date: Sun Sep 25 10:05:34 2011
ProcEnviron:
 PATH=(custom, no user)
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: gdm
UpgradeStatus: No upgrade log present (probably fresh install)

Revision history for this message
James Pursey (jamespursey) wrote :

I have not been able to reproduce this bug for a couple of weeks now.

Revision history for this message
Marc Deslauriers (mdeslaur) wrote :

Thanks for updating the bug, I'm closing it as per your last comment.

visibility: private → public
visibility: private → public
Changed in gdm (Ubuntu):
status: New → Invalid
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.