mythbuntu-bugs team mailing list archive
-
mythbuntu-bugs team
-
Mailing list archive
-
Message #06424
[Bug 672895] Re: mythfilldatabase shows first 6 letters of password with wget command
0.25 in precise. -> fix released.
** Changed in: mythtv (Ubuntu)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Mythbuntu
Bug Team, which is subscribed to mythtv in Ubuntu.
https://bugs.launchpad.net/bugs/672895
Title:
mythfilldatabase shows first 6 letters of password with wget command
Status in MythTV:
Unknown
Status in “mythtv” package in Ubuntu:
Fix Released
Bug description:
Binary package hint: mythtv
I saw hard drive activity on my server and ran iotop. I was
astonished to see my username and the first 6 letters of my password
to my schedulesdirect.org account in the wget command mythfilldatabase
was executing. Other people use this server and they could easily see
this.
wget --http-user=<username> --http-passwd=<first 6 letters of my
password>~0-1.26437 --output-document=- --header=Accept-Encoding:gzip
Thank You For Your TIme
ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: mythtv-backend 0.23.1+fixes26437-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-22.35-generic 2.6.35.4
Uname: Linux 2.6.35-22-generic x86_64
Architecture: amd64
Date: Tue Nov 9 00:07:33 2010
Installed_mythplugins-dbg: 0.0
Installed_mythtv-dbg: 0.0
MythTVDirectoryPermissions: lrwxrwxrwx 1 root root 21 2010-10-24 09:04 /var/lib/mythtv -> /media/storage/mythtv
ProcEnviron:
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: mythtv
To manage notifications about this bug go to:
https://bugs.launchpad.net/mythtv/+bug/672895/+subscriptions