Date: Wed, 22 Feb 2017 14:22:52 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-bugs@FreeBSD.org Subject: [Bug 217298] [geli][boot] geli boot password prompt can be tricked to echo password in clear text Message-ID: <bug-217298-8@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D217298 Bug ID: 217298 Summary: [geli][boot] geli boot password prompt can be tricked to echo password in clear text Product: Base System Version: CURRENT Hardware: Any OS: Any Status: New Severity: Affects Many People Priority: --- Component: misc Assignee: freebsd-bugs@FreeBSD.org Reporter: ehaupt@FreeBSD.org The GELI boot password prompt can be tricked to echo password in clear text. How to repeat: - Boot a system with GELI full disk encryption - Wait for password prompt "GELI Passphrase for disk0p3:" - Enter password without pressing enter - Press ctrl-r Entered password is displayed in clear text. --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-217298-8>