X2Go Bug report logs - #1532
x2goclient + DirectRDP (FreeRDP 2.x): Passwords need to escape quotation marks in the password

version graph

Package: x2goclient; Maintainer for x2goclient is X2Go Developers <x2go-dev@lists.x2go.org>; Source for x2goclient is src:x2goclient.

Reported by: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Date: Fri, 19 Mar 2021 14:25:02 UTC

Severity: normal

Found in version 4.1.2.2-2

Full log


Message #5 received at submit@bugs.x2go.org (full text, mbox, reply):

Received: (at submit) by bugs.x2go.org; 19 Mar 2021 14:24:59 +0000
From mike.gabriel@das-netzwerkteam.de  Fri Mar 19 15:24:56 2021
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.5 required=3.0 tests=BAYES_00,KHOP_HELO_FCRDNS,
	SPF_HELO_NONE,URIBL_BLOCKED autolearn=no autolearn_force=no
	version=3.4.2
Received: from fregna.das-netzwerkteam.de (fregna-internal.das-netzwerkteam.de [IPv6:2a01:4f8:202:1381::1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 297625DAEB
	for <submit@bugs.x2go.org>; Fri, 19 Mar 2021 15:24:54 +0100 (CET)
Received: from grimnir.das-netzwerkteam.de (grimnir.das-netzwerkteam.de [148.251.201.105])
	by fregna.das-netzwerkteam.de (Postfix) with ESMTPS id DB360604F4
	for <submit@bugs.x2go.org>; Fri, 19 Mar 2021 14:24:53 +0000 (UTC)
Received: from das-netzwerkteam.de (localhost [127.0.0.1])
	by grimnir.das-netzwerkteam.de (Postfix) with ESMTP id A8BFAC0701
	for <submit@bugs.x2go.org>; Fri, 19 Mar 2021 15:24:53 +0100 (CET)
Received: from business-90-187-115-117.pool2.vodafone-ip.de
 (business-90-187-115-117.pool2.vodafone-ip.de [90.187.115.117]) by
 mail.das-netzwerkteam.de (Horde Framework) with HTTPS; Fri, 19 Mar 2021
 14:24:53 +0000
Date: Fri, 19 Mar 2021 14:24:53 +0000
Message-ID: <20210319142453.Horde.hwkFPKXsKsu05XQG68INjMA@mail.das-netzwerkteam.de>
From: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>
To: submit@bugs.x2go.org
Subject: x2goclient + DirectRDP (FreeRDP 2.x): Passwords need to escape
 quotation marks in the password
User-Agent: Horde Application Framework 5
Accept-Language: de,en
Organization: DAS-NETZWERKTEAM
X-Originating-IP: 90.187.115.117
X-Remote-Browser: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML,
 like Gecko) Chrome/89.0.4389.82 Safari/537.36
Content-Type: multipart/signed; boundary="=_m275uDnoYxaL4EGi-nSxn9d";
 protocol="application/pgp-signature"; micalg=pgp-sha512
MIME-Version: 1.0
[Message part 1 (text/plain, inline)]
Package: x2goclient
Severity: normal
Version: 4.1.2.2-2

If user passwords contains a single " character, xfreerdp calls fail  
because the " character is not escaped / quoted properly and  
interpreted as part of the command line.

Mike
-- 

DAS-NETZWERKTEAM
c\o Technik- und Ökologiezentrum Eckernförde
Mike Gabriel, Marienthaler Str. 17, 24340 Eckernförde
mobile: +49 (1520) 1976 148
landline: +49 (4351) 850 8940

GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22  0782 9AF4 6B30 2577 1B31
mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 14:44:51 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.