Bug 38968

Summary: vncviewer echoes password in clear, not as *****
Product: [Retired] Red Hat Linux Reporter: pdenis2
Component: vncAssignee: Tim Waugh <twaugh>
Status: CLOSED DUPLICATE QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.0Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-05-03 18:12:33 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description pdenis2 2001-05-03 18:12:28 UTC 
From Bugzilla Helper:
User-Agent: Mozilla/4.77 [en] (X11; U; Linux 2.2.16-22 i686)

Description of problem:
The popup password entry box for vnc(3.3.3r2-14) echoes the typed password
in the clear:  type 'swordfish', you see 'swordfish' instead of
'*********'.

How reproducible:
Always

Steps to Reproduce:
1. type 'vncviewer'; enter hostname to connect	
2. type 'swordfish in password box
	

Actual Results:  echoes "swordfish" in plaintext

Expected Results:   should echo '********'

Additional info:

RH7.0 with upgrades; gnome desktop
VNC version:
Name        : vnc                          Relocations: (not relocateable)
Version     : 3.3.3r2                           Vendor: Red Hat, Inc.
Release     : 14                            Build Date: Mon 19 Feb 2001
10:27:13 AM PST
Install date: Sat 14 Apr 2001 12:16:54 PM PDT      Build Host:
porky.devel.redhat.com
Group       : User Interface/Desktops       Source RPM:
vnc-3.3.3r2-14.src.rpm
Comment 1 Tim Waugh 2001-05-03 21:52:22 UTC 
This is actually an Xaw bug, fixed in rawhide.


*** This bug has been marked as a duplicate of 19231 ***