All stdin (including passwords in clearcase) is displayed on splash screen at shutdown

Bug #1198741 reported by bcbc on 2013-07-07
This bug affects 2 people
Affects Status Importance Assigned to Milestone
plymouth (Ubuntu)

Bug Description

When I shutdown my computer I see displayed all keystrokes that I have entered in terminal. This includes passwords and passphrases etc.

It's as though there is a keylogger recording what I type and then displaying that on shutdown.

I am running saucy up to date including the Mir ppa.

ProblemType: Bug
DistroRelease: Ubuntu 13.10
Package: plymouth 0.8.8-0ubuntu7
ProcVersionSignature: Ubuntu 3.10.0-2.10-generic 3.10.0
Uname: Linux 3.10.0-2-generic x86_64
ApportVersion: 2.10.2-0ubuntu3
Architecture: amd64
CheckboxSubmission: dd7f729683fa7fd3f2e256ba311e86cb
CheckboxSystem: d00f84de8a555815fa1c4660280da308
Date: Sun Jul 7 14:32:48 2013
DefaultPlymouth: /lib/plymouth/themes/solar/solar.plymouth
InstallationDate: Installed on 2011-10-08 (638 days ago)
InstallationMedia: Ubuntu 11.10 "Oneiric Ocelot" - Beta amd64 (20111006)
MachineType: Dell Inc. Inspiron N4010
MarkForUpload: True
ProcCmdLine: BOOT_IMAGE=/vmlinuz root=UUID=18B4B7BBB4B799A8 loop=/ubuntu/disks/raring.disk ro quiet splash vt.handoff=7
ProcFB: 0 inteldrmfb
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz root=UUID=18B4B7BBB4B799A8 loop=/ubuntu/disks/raring.disk ro quiet splash vt.handoff=7
SourcePackage: plymouth
TextPlymouth: /lib/plymouth/themes/ubuntu-text/ubuntu-text.plymouth
UpgradeStatus: Upgraded to saucy on 2013-05-04 (64 days ago) 03/31/2011
dmi.bios.vendor: Dell Inc.
dmi.bios.version: A13 021CN3
dmi.board.vendor: Dell Inc.
dmi.board.version: A13
dmi.chassis.type: 8
dmi.chassis.vendor: Dell Inc.
dmi.chassis.version: A13
dmi.modalias: dmi:bvnDellInc.:bvrA13:bd03/31/2011:svnDellInc.:pnInspironN4010:pvrA13:rvnDellInc.:rn021CN3:rvrA13:cvnDellInc.:ct8:cvrA13: Inspiron N4010
dmi.product.version: A13
dmi.sys.vendor: Dell Inc.

bcbc (bcbc) wrote :
information type: Private Security → Public Security
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in plymouth (Ubuntu):
status: New → Confirmed
Jono Bacon (jonobacon) on 2013-08-08
tags: added: flavormirbug
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers