xffm: password exposure
Sergey Manucharyan
sm at netsys.am
Wed Feb 9 14:57:04 CET 2005
Thank you, Edscott.
I didn't check it, because have used the graphical installer.
Now I know what to do :)
Sergey.
On Wed, 09 Feb 2005 07:48:44 -0600
edscott wilson garcia <edscott at xfce.org> wrote:
> El mié, 09-02-2005 a las 12:36 +0400, Sergey Manucharyan escribió:
> > Hi guys,
> >
> > I've just noticed the new appearance of old bug: xffm shows
> > username%password when browsing smb network (xfce 4.2.0) :
> >
> > Domain=[VIRLOG] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
> > XFSAMBA> smbclient //AM-ARARAT-DT/public -U serge%V8RasdU -c ls/*
> >
> > A year ago I filed it as a bug and it was resolved.
>
> The condition should not change. Apparently you have configured with
> --enable-debug on. The username is encapsulated within a debug
> directive:
>
> print_diagnostics ("nonverbose","XFSAMBA> ",
> "smbclient"," ",NMBshare," ",
> #ifdef DEBUG
> "-U"," ",pass," ",
> #endif
> "-c", " ",NMBcommand,"\n",
> NULL);
>
>
> regards,
>
> Edscott
More information about the Xfce
mailing list