Bug 185569

Summary:	Password is revealed in clear-text
Product:	[Applications] systemsettings	Reporter:	Bjørn Tore Lønstad <btlonstad>
Component:	general	Assignee:	System Settings Bugs <sourtooth+ssbugs>
Status:	RESOLVED UNMAINTAINED
Severity:	normal
Priority:	NOR
Version First Reported In:	unspecified
Target Milestone:	---
Platform:	Mandriva RPMs
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description Bjørn Tore Lønstad 2009-02-25 20:57:58 UTC

Version:            (using KDE 3.5.10)
OS:                Linux
Installed from:    Mandriva RPMs

After having installed a printer via samba the password is revealed in clear-text within the KDE Control Center (kcontrol). Control Center -> Peripherals -> Printers -> Select the printer connected via samba. In the Information tab, at "Device:" the password is revealed in this manner: "smb://username:password@/winprint/printer1".

In mcc, under properties for the same printer the field labeled "Device URI" says "smb//...winprint/printer1" and there is a "Change..."-button which can be used to change the user and password (hidden).

The bug is also seen in RHEL5 (KDE 3.5.4).

The problem is also mentioned in a bug from 2007:
https://bugs.kde.org/show_bug.cgi?id=141456

Comment 1 Ben Cooksley 2009-05-26 08:47:26 UTC

Sorry, but the module in question no longer exists in KDE 4. It was replaced by a new printer applet.