Debian bug report logs - #1251 ppp gives out password Package: ppp ; Reported by: richard@elmail.co.uk (Richard Kettlewell); 78 days old . ----------------------------------------------------------------------- Message received at debian-bugs: From elmail.co.uk!richard Mon Aug 14 19:32:10 1995 Return-Path: Received: from pixar.com by mongo.pixar.com with smtp (Smail3.1.28.1 #15) id m0siBnV-000BF7C; Mon, 14 Aug 95 19:32 PDT Received: from post.elmail.co.uk (tlingit.elmail.co.uk) by pixar.com with SMTP id AA22318 (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Mon, 14 Aug 1995 19:32:00 -0700 Received: from sfere.elmail.co.uk by post.elmail.co.uk (ElectricMail-MESSAGE-2.0-BETA+) id DAA11630; Tue, 15 Aug 1995 03:30:32 +0100 Received: by sfere.elmail.co.uk id (Debian /\oo/\ Smail3.1.29.1 #29.33); Tue, 15 Aug 95 03:33 BST Date: Tue, 15 Aug 95 03:33 BST From: richard@elmail.co.uk (Richard Kettlewell) Message-Id: <303006900822@sfere.elmail.co.uk> To: debian-bugs@pixar.com Subject: ppp gives out password Package: ppp Version: 2.1.2b-1 /etc/ppp/ppp-connect as shipped will put the PPP account's password in a world-readable ps listing. sfere:richard$ really ip start starting /usr/sbin/pppd ... sfere:richard$ ps xawu USER PID %CPU %MEM SIZE RSS TTY STAT START TIME COMMAND [...] root 2037 0.0 4.6 117 328 s02 S 03:26 0:00 /usr/sbin/pppd root 2038 1.2 5.8 286 416 s02 S 03:26 0:00 sh /etc/ppp/ppp-connect root 2039 0.4 2.0 38 148 s02 S 03:26 0:00 /usr/sbin/chat ATM0DT576815 CONNECT ogin: sfere word: [password edited out] sfere:richard$ ttfn/rjk ----------------------------------------------------------------------- Acknowledgement sent to richard@elmail.co.uk (Richard Kettlewell) : New bug report received and forwarded. Full text available. ----------------------------------------------------------------------- Report forwarded to debian-devel@pixar.com : Bug#1251 ; Package ppp . Full text available. ----------------------------------------------------------------------- Ian Jackson / iwj10@thor.cam.ac.uk , with the debian-bugs tracking mechanism This page last modified 07:43:01 GMT Wed 01 Nov