adb shell sudo shows password in the clear

Bug #1369450 reported by James Hunt
262
This bug affects 2 people
Affects Status Importance Assigned to Milestone
android-tools (Ubuntu)
Confirmed
High
Oliver Grawert

Bug Description

$ adb shell sudo id
[sudo] password for phablet: you should not be able to see this!!!

ProblemType: Bug
DistroRelease: Ubuntu 14.10
Package: android-tools-adb 4.2.2+git20130218-3ubuntu35
ProcVersionSignature: Ubuntu 3.16.0-14.20-generic 3.16.2
Uname: Linux 3.16.0-14-generic x86_64
ApportVersion: 2.14.7-0ubuntu2
Architecture: amd64
CurrentDesktop: Unity
Date: Mon Sep 15 09:43:59 2014
InstallationDate: Installed on 2014-04-11 (156 days ago)
InstallationMedia: Ubuntu 14.04 LTS "Trusty Tahr" - Daily amd64 (20140409)
SourcePackage: android-tools
UpgradeStatus: Upgraded to utopic on 2014-05-08 (129 days ago)

Revision history for this message
James Hunt (jamesodhunt) wrote :
information type: Public → Public Security
Revision history for this message
Jamie Strandboge (jdstrand) wrote :

FYI, as a workaround I suggest using 'phablet-shell' since it behaves correctly.

Changed in android-tools (Ubuntu):
status: New → Confirmed
importance: Undecided → High
tags: added: rtm14
Changed in android-tools (Ubuntu):
assignee: nobody → Oliver Grawert (ogra)
Revision history for this message
Nicolas (coinb) wrote :

Still true (ubuntu 15.04) !

To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.