xffm: password exposure

edscott wilson garcia edscott at xfce.org
Wed Feb 9 14:48:44 CET 2005


El mié, 09-02-2005 a las 12:36 +0400, Sergey Manucharyan escribió:
> Hi guys,
> 
> I've just noticed the new appearance of old bug: xffm shows
> username%password when browsing smb network (xfce 4.2.0) :
> 
> Domain=[VIRLOG] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
> XFSAMBA> smbclient //AM-ARARAT-DT/public -U serge%V8RasdU -c ls/*
> 
> A year ago I filed it as a bug and it was resolved.

The condition should not change. Apparently you have configured with
--enable-debug on. The username is encapsulated within a debug
directive:
  
	print_diagnostics ("nonverbose","XFSAMBA> ",
		  "smbclient"," ",NMBshare," ",
#ifdef DEBUG
		  "-U"," ",pass," ",
#endif
		  "-c", " ",NMBcommand,"\n",
		  NULL);


regards,

Edscott


-- 
edscott wilson garcia <edscott at xfce.org>



More information about the Xfce mailing list