Public bug reported:

Binary package hint: pwgen

If you generate non-ambiguous passwords with pwgen by passing it the -B
argument capital letter Os is not prevented.  For example this:

$ pwgen -B 8 1
Ies7Onga

should never happen, but it does.  (I didn't make up that output I
copied it from konsole)

In the code letters are generated (during this step they are checked
against the ambiguous character list).  In the next step some characters
are "uppercased".  So a small o (which is fine) gets converted to a
large O, but no second check happens so large Os can slip through.  I
believe I've fixed the problem, and have included a patch.

Thank you.

Details:
Description:    Ubuntu 10.04.1 LTS
Release:        10.04

pwgen:
  Installed: 2.06-1ubuntu2
  Candidate: 2.06-1ubuntu2
  Version table:
 *** 2.06-1ubuntu2 0
        500 http://us.archive.ubuntu.com/ubuntu/ lucid/main Packages
        100 /var/lib/dpkg/status

** Affects: pwgen (Ubuntu)
     Importance: Undecided
         Status: New

-- 
pwgen includes capital Os when generating non-ambiguous passwords
https://bugs.launchpad.net/bugs/638418
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to