Menu

SECURITY FAILURE ON CLIBOARD

Help
Anonymous
2011-04-21
2012-11-19
  • Anonymous

    Anonymous - 2011-04-21

    Hello,

    I'm using key pass 2.13 with Windows XP 2002 Service Pack 3

    When I copy a username or password, data are pasted on Office Clipboard => data are visible AND are not cleared from Clipboard after 12 s (even after message "clipboard cleared")
    Clipboard must be cleared manualy. I guess it's a 3 stars bug (to be corrected ASAP !!!)

     
  • Paul

    Paul - 2011-04-21

    Nope, works fine if you don't use badly behaved clipboard modifiers.
    Try the suggestion here: https://sourceforge.net/projects/keepass/forums/forum/329221/topic/3925883

    cheers, Paul

     
  • Anonymous

    Anonymous - 2011-05-06

    Greeting Paul,

    Thank you for your reply!!
    Ok, you’re right (but I’m right too!!! I’m must add comments).
    1) When clipboard is closed, KeyPass behaviour is correct (when I copy/paste password, clipboard is cleaned after a specified duration => when I open clipboard there is no data: fine with me!!!)
    2) Issue is raised when clipboard is still opened on my desk (i.e : an Excel spreadsheet is still opened on my desk , clipboard is opened because I copy / past data in Excel). If I open Keepass on my desk (with an existing Excel file including an opened clipboard) and I copy / paste a password => then password appears in my already opened clipboard, AND DATA ARE NOT ERAISED after the specified duration. According to my opinion, Keepass is not able to clean an opened clipboard….Data are only cleaned if I used the specific office clipboard function “clean clipboard”. I precise that I do not use badly behaved clipboard functions in keepass (I used recommended functions….).

    Can Keepass team investigate more? This tool is great, but I guess that this failure should be corrected (i.e : on a shared computer, anyone can retrieve my password if I use Keepass with an opened clipboard…workaround consist in never use Keepass with an opened clipboard !!).
    Thanks
    Alex

     
  • Paul

    Paul - 2011-05-11

    Unfortunately we don't have the resources to test and fix every problem associated with external programs - we do our best (Dominik does most).
    The easiest solution is either Auto-Type or Drag n Drop.

    cheers, Paul

     

Log in to post a comment.

MongoDB Logo MongoDB