[ gaim-Support Requests-1542814 ] Security Issue

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Support Requests item #1542814, was opened at 2006-08-18 14:22
Message generated for change (Comment added) made by aaronsheldon
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=200235&aid=1542814&group_id=235

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Priority: 5
Submitted By: Grayheart (grayheart)
Assigned to: Nobody/Anonymous (nobody)
Summary: Security Issue

Initial Comment:
The accounts.xml file in the .gaim settings folder
stores user password information in plain text
unencrpyted format.  This is a major security risk. 
Especially for people who run their own chat servers
that authenticate againt LDAP for users, as it then
stores your NETWORK password in plain text.  This could
allow other network users to aquire passwords with
little difficulty.  This is not an issue with many
other chat clients.  Trillian, spark, yahoo, and msn
all at least hash the password.

----------------------------------------------------------------------

Comment By: Aaron Sheldon (aaronsheldon)
Date: 2006-08-18 22:49

Message:
Logged In: YES 
user_id=1528827

http://gaim.sourceforge.net/plaintextpasswords.php

Gaim does not save your password by default.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=200235&aid=1542814&group_id=235

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Gaim-support mailing list
Gaim-support@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/gaim-support

[Index of Archives]     [Kernel Development]     [Red Hat Install]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux