Root Password Readable in Clear Text with Ubuntu

BBitmaster writes "An extremely critical bug and security threat was discovered in Ubuntu Breezy Badger 5.10 earlier today by a visitor on the Ubuntu Forums that allows anyone to read the root password simply by opening an installer log file. Apparently the installer fails to clean its log files and leaves them readable to all users. The bug has been fixed, and only affects The 5.10 Breezy Badger release. Ubuntu users, be sure to get the patch right away."

Comments

Re:So what if this was fixed quickly.

[hvatum]

The mantra of course applies here: Unless you've programmed a totally secure operating system, keep your mouth shut.

As always. Unless you can build a space-shuttle that doesn't crash or perform a succesful heart bypass surgery you have absolutely no right to critisize those who at least gave it a try. The surgeon was drunk? NASA forgot to put fuel in the shuttle? Doesn't matter.

The same applies for leading a country - unless you think you can do a better job keep your trap shut!

Re:Legal before security-the openssl vs netatalk m

[Jesus_666]

Oh, come on. You filed the bug in 2002! They still have to test it for a few years to make sure it's stable, then they will try and solve it. You can't expect Debian to fix any cutting-edge bug...