*** This bug is a duplicate of bug 175602 ***
https://bugs.launchpad.net/bugs/175602
*** This bug is a security vulnerability ***
Public security bug reported:
Binary package hint: alacarte
Hardy amd64
wanted to check the program associated with 'manage user and groups' by
viewing the properties from main-menu. During this the application
crashed.
Program is 'users-admin' and contains a security bug:
it ignores the setting in sudoers, where I have configured to use the
'target-password' instead of insecure 'user-password'. Here the line in
'sudoers:
Defaults !lecture,tty_tickets,!fqdn,targetpw,timestamp_timeout = 0
This definitely is a severe security issue, because it is absolutely useless to
ask a user a second time for his password to gain administrative rights (he
already logged in with the same PW).
I set up a genguine root-account, so I can use a simple password to comfortably
log-in as a user, while the root-account is protected by a strong password.
This password should be used to gain administrative rights!
ProblemType: Crash
Architecture: amd64
Date: Thu Feb 28 11:03:37 2008
DistroRelease: Ubuntu 8.04
ExecutablePath: /usr/bin/alacarte
InterpreterPath: /usr/bin/python2.5
NonfreeKernelModules: nvidia
Package: alacarte 0.11.4-0ubuntu1
PackageArchitecture: all
ProcCmdline: /usr/bin/python -OOt /usr/bin/alacarte
ProcEnviron:
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
LANG=de_DE.UTF-8
SHELL=/bin/bash
PythonArgs: ['/usr/bin/alacarte']
SourcePackage: alacarte
Title: alacarte crashed with TypeError in on_item_tree_cursor_changed()
Traceback:
Traceback (most recent call last):
File "/usr/lib/python2.5/site-packages/Alacarte/MainWindow.py", line 437, in
on_item_tree_cursor_changed
item = items[iter][3]
TypeError: could not parse subscript as a tree path
Uname: Linux 2.6.24-8-generic x86_64
UserGroups: adm admin audio cdrom dialout dip flohostnamey lpadmin netdev
plugdev powerdev scanner uml-net vboxusers video
** Affects: alacarte (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-crash
--
alacarte crashed with TypeError in on_item_tree_cursor_changed()
https://bugs.launchpad.net/bugs/196451
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
