From owner-freebsd-security@FreeBSD.ORG Fri Dec 2 12:58:13 2005 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id DE40116A420 for ; Fri, 2 Dec 2005 12:58:13 +0000 (GMT) (envelope-from pietro.cerutti@gmail.com) Received: from zproxy.gmail.com (zproxy.gmail.com [64.233.162.207]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5AB7F43D76 for ; Fri, 2 Dec 2005 12:58:11 +0000 (GMT) (envelope-from pietro.cerutti@gmail.com) Received: by zproxy.gmail.com with SMTP id i11so483935nzh for ; Fri, 02 Dec 2005 04:58:10 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=EcKWUofkWj5jW3TxPvFF+s0LVYTccb5PsUS8DL6cYdhIwjd1JlnWDmbRCgFqM/UXHI3NtRLT6TXQjDCUIdrHT0IGElVA0NpnvBgpJO6EEL0UH3FwIVBZwxIM41cvS7HiRVhXXWSuEosPg/HSwDLF/pWnUog7yJ6qZyFWseQPj9Y= Received: by 10.64.193.4 with SMTP id q4mr1449813qbf; Fri, 02 Dec 2005 04:58:10 -0800 (PST) Received: by 10.64.150.18 with HTTP; Fri, 2 Dec 2005 04:58:09 -0800 (PST) Message-ID: Date: Fri, 2 Dec 2005 13:58:09 +0100 From: Pietro Cerutti To: freebsd-security@freebsd.org In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: Subject: Fwd: acroread security problem X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 Dec 2005 12:58:14 -0000 Sorry guys, the problem is the same with acroread standalone, not only with the plugin! Thanx, best regards.. ---------- Forwarded message ---------- From: Pietro Cerutti Date: 2-dic-2005 13.43 Subject: acroread security problem To: freebsd-security@freebsd.org Dear all, I think there's a security problem with the acroread plugin for firefox. I'm using sysutils/pwsafe to manage my passwords. A feature of this tool is that it can copy the requested password to the X clipboard, allowing the user to paste it (eg. in a password box), never seeing the pass in clear. When I load a PDF document in Firefox, the acroread process lives on even after the PDF document is closed: $ pgrep acroread 17260 and reads anything I copy in the X clipboard. So when I use pwsafe to get a password, the pass is sent to the acroread process: $ pwsafe -p gmail Going to copy password to X selection Enter passphrase for /home/piter/.pwsafe.dat: [xxx] You are ready to paste the password for gmail from PRIMARY and CLIPBOARD Press any key when done Sending password for gmail to acroread@gahr via CLIPBOARD and this is done automatically. Note that I dind't touch any key after writing the main password of pwsafe (noted [xxx] in the code above). Can anyone explain this behaviour? Thank you very much, best regards. [list of ports installed] www/firefox: firefox-1.5,1 www/linuxpluginwrapper: linuxpluginwrapper-20050910 print/acroread7: acroread7-7.0.1 -- Pietro Cerutti Beansidhe - SwiSS Death / Thrash Metal Windows: "Where do you want to go today?" Linux: "Where do you want to go tomorrow?" FreeBSD: "Are you guys coming or what?" -- Pietro Cerutti Beansidhe - SwiSS Death / Thrash Metal Windows: "Where do you want to go today?" Linux: "Where do you want to go tomorrow?" FreeBSD: "Are you guys coming or what?"