xffm: password exposure

Sergey Manucharyan sm at netsys.am
Wed Feb 9 14:57:04 CET 2005


Thank you, Edscott.

I didn't check it, because have used the graphical installer.
Now I know what to do :)

Sergey.

On Wed, 09 Feb 2005 07:48:44 -0600
edscott wilson garcia <edscott at xfce.org> wrote:

> El mié, 09-02-2005 a las 12:36 +0400, Sergey Manucharyan escribió:
> > Hi guys,
> > 
> > I've just noticed the new appearance of old bug: xffm shows
> > username%password when browsing smb network (xfce 4.2.0) :
> > 
> > Domain=[VIRLOG] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
> > XFSAMBA> smbclient //AM-ARARAT-DT/public -U serge%V8RasdU -c ls/*
> > 
> > A year ago I filed it as a bug and it was resolved.
> 
> The condition should not change. Apparently you have configured with
> --enable-debug on. The username is encapsulated within a debug
> directive:
>   
> 	print_diagnostics ("nonverbose","XFSAMBA> ",
> 		  "smbclient"," ",NMBshare," ",
> #ifdef DEBUG
> 		  "-U"," ",pass," ",
> #endif
> 		  "-c", " ",NMBcommand,"\n",
> 		  NULL);
> 
> 
> regards,
> 
> Edscott



More information about the Xfce mailing list