Public bug reported:

Binary package hint: gnome-system-tools

Ubuntu 10.10 32 bit and 64 bit

I open a terminal window and type shares-admin - the dialog tells me
"Sharing services are not installed" and prompts me to install NFS
and/or SMB.  I click the "Install Services" button and the following
packages are DOWNLOADED and INSTALLED (example from 64 bit machine).

  libgssglue1_0.1-4_amd64.deb
  libnfsidmap2_0.23-2_amd64.deb
  librpcsecgss3_0.19-2_amd64.deb
  nfs-common_1%3a1.2.2-1ubuntu1_amd64.deb
  nfs-kernel-server_1%3a1.2.2-1ubuntu1_amd64.deb
  portmap_6.0.0-2ubuntu1_amd64.deb
  samba_2%3a3.5.4~dfsg-1ubuntu8_amd64.deb

I am NOT prompted for credentials to gain escalated privileges. Upon
completion I verified that SAMBA is INSTALLED and RUNNING.  This seems
to me to be a security issue as I am able to perform privileged
activities without proper authentication.

ProblemType: Bug
DistroRelease: Ubuntu 10.10
Package: gnome-system-tools 2.32.0-0ubuntu1
ProcVersionSignature: Ubuntu 2.6.35-22.35-generic 2.6.35.4
Uname: Linux 2.6.35-22-generic x86_64
Architecture: amd64
Date: Fri Nov 19 06:25:36 2010
InstallationMedia: Ubuntu 10.10 "Maverick Meerkat" - Release amd64 (20101007)
ProcEnviron:
 LANG=en_US.utf8
 SHELL=/bin/bash
SourcePackage: gnome-system-tools

** Affects: gnome-system-tools (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug maverick

-- 
shares-admin installs packages without authentication
https://bugs.launchpad.net/bugs/677486
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to gnome-system-tools in ubuntu.

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

Reply via email to