Apache OpenOffice (AOO) Bugzilla – Issue 70447
Password displayed in plaintext of a dialogue
Last modified: 2007-04-29 19:51:23 UTC
In OO Writer the password used to access an SMB share is displayed in plaintext in a dialogue when discarding changes to a document (and probably elsewhere). It may also be transmitted in plaintext on the wire. Repro steps: 1) Open a document from an smb share in Konquereor file manager e.g smb://fileshare/document.odt 2) Alter the document 3) Try to close Open Office. 4) The Password will be displayed in plain text in a dialog box. This issue is reproducable regardless of whether the "remember my password" box is checked. Someone else tried to recreate the issue on another system, but OO crashed when opening the file from a share. Maybe this is two issues?
i can't reproduce this for OOo 2.0.3. Neither a password displaying dialog box, nor a crash. maybe you could attach an example document and a screenshot of the dialog box?
Yes, please add a screenshot. Does this happen with other documents than Writer docs? Which version of OOo do you use exactly?
I installed the lastest stable release on a work machine during my summer job, so the version is whatever was the current build on openoffice.org about 5/6 weeks ago. Unfortunately I don't have access to the machine anymore, nor can I recreate the issue at home. The OS was the default stable SUSE 10.1 and the SMB share was accessed from a Windows Server 2003 machine. Maybe someone has a similar environment that they can use? If I had access to the machine, I could easily recreate the issue and provide a screenshot. The dialog says something like: Do you want to save the changes made to smb://SERVER?password=<password>&aaa=bbb [Save] [Discard] [Cancel] HTH.
Reassigned
tompsci, as far as I know smb:// is not supported by community build - it is extension by individual distributions. I can't reproduce the problem with OO2.2 on Suse 10.2 - Office just would not open .odt file from smb://USERNAME@192.168.1.4/share/folder So you should file bug with your distribution. Closing as invalid.
and closing.