[vox] Ubuntu: "Administrator root password readable in cleartext on Breezy"

Bill Kendrick nbs at sonic.net
Mon Mar 13 23:04:14 PST 2006


In case folks haven't seen it here. (I saw it mentioned in SacLUG)

  Bug #34606 in Ubuntu: "Administrator root password readable in
  cleartext on Breezy"

  https://launchpad.net/distros/ubuntu/+bug/34606

    The root password from the first user registred by Breezy can be found
    by any user by reading the file

      /var/log/installer/cdebconf/questions.dat

    a quick

      grep -r rootpassword /var

    shows that the rootpassword is forgotten in cleartext by the installer
    on several occations

    [...]


-- 
-bill!                                    Tux Paint 2006 wall calendar,
bill at newbreedsoftware.com                CDROM, bumper sticker & apparel
http://www.newbreedsoftware.com/       http://www.cafepress.com/newbreedsw


More information about the vox mailing list