>Number:         19555
>Category:       bin
>Synopsis:       pppoectl requires password on commandline
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Tue Dec 24 20:37:00 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     Christian Biere
>Release:        NetBSD 1.6K
>Organization:
>Environment:

>Description:
In order to setup a PPPoE connection with pppoectl it's required to put
login and password for the account onto the command line. Actually,
this possibility should not be supported at all. This is not best known
practice and should be avoided. pppoectl should instead read the
password from a file or stdin. I assume it's a low priority security
issue because it's known and seldom a problem in most real world
configurations. Nevertheless, this should be fixed.

>How-To-Repeat:


>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: