Bug 503 - Password is echoed when running passwd via ssh
Summary: Password is echoed when running passwd via ssh
Status: CLOSED FIXED
Alias: None
Product: Portable OpenSSH
Classification: Unclassified
Component: sshd (show other bugs)
Version: -current
Hardware: ix86 Linux
: P2 security
Assignee: OpenSSH Bugzilla mailing list
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-03-08 01:48 AEDT by Klaus Jaehne
Modified: 2004-04-14 12:24 AEST (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Klaus Jaehne 2003-03-08 01:48:52 AEDT 
client and server systems are RedHat 7.2 with openssh-3.1p1-6. When running "ssh
<otherhost> passwd <username>", the password is visible on the console:

[root@host1 root]# ssh host2 passwd user1
New password: <password visible here!>
Retype new password: <password visible here!>
Changing password for user user1
passwd: all authentication tokens updated successfully

I also ran tests with v3.4p1 on RedHat 8.0 as well as with and without public
key authentication, where this problem also occured.
Comment 1 Klaus Jaehne 2003-03-08 02:04:55 AEDT 
just use ssh -t...
Comment 2 Damien Miller 2004-04-14 12:24:18 AEST 
Mass change of RESOLVED bugs to CLOSED