Re: Always get Invalid password while trying to connect to spice server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On mercoledì 26 dicembre 2018 13:38:28 CET, Frediano Ziglio wrote:
Yes, this looks like a format string error in the upper (not into spice) layer.

This potentially is a security problem.

Considering the spice server is exposed to the internet this is definitely worth investigating.

The specific '%' character could be the issue, can you try others ('!', '@' and
so on) ?

I tried several other special characters and they all seems to work, expect for "Password&&" which gets converted to "Password&&" (if I type "Password&&" it works).

Niccolo'
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
https://lists.freedesktop.org/mailman/listinfo/spice-devel




[Index of Archives]     [Linux Virtualization]     [Linux Virtualization]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]     [Monitors]