| 2006-08-17 22:24:11 |
Simon |
bug |
|
|
added bug |
| 2006-08-17 22:39:42 |
Simon Law |
sudo: status |
Unconfirmed |
Rejected |
|
| 2006-08-17 22:39:42 |
Simon Law |
sudo: statusexplanation |
|
I don't think this is a bug in sudo.
This is because you're not giving sudo a terminal to ask the password
on. You need to use "ssh -t", which will provide it with a proper virtual
terminal.
Thanks. |
|
| 2006-08-22 13:28:21 |
Matt Zimmerman |
sudo: status |
Rejected |
Confirmed |
|
| 2006-08-22 13:28:21 |
Matt Zimmerman |
sudo: importance |
Untriaged |
Medium |
|
| 2006-08-22 13:28:21 |
Matt Zimmerman |
sudo: statusexplanation |
I don't think this is a bug in sudo.
This is because you're not giving sudo a terminal to ask the password
on. You need to use "ssh -t", which will provide it with a proper virtual
terminal.
Thanks. |
sudo shouldn't display a password prompt if its stdin isn't a terminal |
|
| 2006-08-22 13:28:21 |
Matt Zimmerman |
sudo: assignee |
|
pitti |
|
| 2006-09-25 07:46:49 |
Martin Pitt |
sudo: status |
Confirmed |
In Progress |
|
| 2006-09-25 07:46:49 |
Martin Pitt |
sudo: importance |
Medium |
High |
|
| 2006-09-25 07:46:49 |
Martin Pitt |
sudo: statusexplanation |
sudo shouldn't display a password prompt if its stdin isn't a terminal |
|
|
| 2006-10-06 08:30:17 |
Martin Pitt |
sudo: status |
In Progress |
Confirmed |
|
| 2006-10-06 08:30:17 |
Martin Pitt |
sudo: statusexplanation |
|
I just tried to fix this with a relatively obvious approach. While this works fine for the ssh case, it completely breaks gksudo, which delivers the passphrase over stdin. To fix this properly, sudo needs something like gpg's --passphrase-from-fd.
I think I'll pass this to upstream for now. |
|
| 2006-10-06 10:11:09 |
Martin Pitt |
sudo: importance |
High |
Medium |
|
| 2006-10-06 10:11:09 |
Martin Pitt |
sudo: statusexplanation |
I just tried to fix this with a relatively obvious approach. While this works fine for the ssh case, it completely breaks gksudo, which delivers the passphrase over stdin. To fix this properly, sudo needs something like gpg's --passphrase-from-fd.
I think I'll pass this to upstream for now. |
Removing milestone, it's too intrusive to fix this in sudo/gksudo/etc. now. |
|
| 2009-04-16 11:25:18 |
Martin Pitt |
sudo (Ubuntu): status |
Confirmed |
Triaged |
|
| 2009-04-16 11:25:18 |
Martin Pitt |
sudo (Ubuntu): assignee |
Martin Pitt (pitti) |
|
|
| 2009-05-27 09:32:50 |
Martin Pitt |
bug watch added |
|
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=233730 |
|
| 2009-05-27 09:32:50 |
Martin Pitt |
bug task added |
|
sudo (Debian) |
|
| 2009-05-27 09:41:10 |
Bug Watch Updater |
sudo (Debian): status |
Unknown |
Fix Released |
|
| 2010-04-03 21:38:06 |
Kees Cook |
sudo (Ubuntu): status |
Triaged |
Won't Fix |
|
| 2010-04-03 21:38:45 |
Kees Cook |
description |
Binary package hint: sudo
When using keys to connect via ssh to a server, and issuing the command 'ssh someuser@somehost sudo somecommand', the password prompt which appears to ask for the sudo password displays the password on the screen, rather than hiding it. This puts your password at risk of being compromised by anyone who happens to be looking over your shoulder. |
Binary package hint: sudo
When using keys to connect via ssh to a server, and issuing the command 'ssh someuser@somehost sudo somecommand', the password prompt which appears to ask for the sudo password displays the password on the screen, rather than hiding it. This puts your password at risk of being compromised by anyone who happens to be looking over your shoulder.
(SOLUTION: use "-t" with ssh, see https://wiki.ubuntu.com/SecurityTeam/FAQ#SSH ) |
|
| 2012-02-23 23:08:32 |
Kai Kasurinen |
removed subscriber Kai Kasurinen |
|
|
|
