31002 - Database passwords are displayed in the SAS® log in clear text

Problem Note 31002: Database passwords are displayed in the SAS® log in clear text

If you invoke the METALIB procedure from within a macro definition, and the MPRINT SAS system option is turned on when you run the macro, then passwords that are associated with the library referenced in the PROC METALIB step might display in the SAS log.

The components of the underlying LIBNAME statement that PROC METALIB generates are stored in a buffer during execution of the procedure. The MPRINT option causes a portion of the contents of this buffer to appear in the log. Depending upon the structure of the LIBNAME statement and the portion of the buffer that is displayed, this information might include passwords. These passwords can appear in encrypted form or in clear text.

Select the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

Product Family	Product	System	SAS Release
Product Family	Product	System	Reported	Fixed*
SAS System	Base SAS	Microsoft Windows 2000 Professional	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows 2000 Server	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows 2000 Datacenter Server	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows 2000 Advanced Server	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft® Windows® for 64-Bit Itanium-based Systems	9.1 TS1M3 SP4	9.2 TS1M0
		z/OS	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows NT Workstation	9.1 TS1M3 SP4
		Microsoft Windows Server 2003 Datacenter Edition	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows Server 2003 Enterprise Edition	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows Server 2003 Standard Edition	9.1 TS1M3 SP4	9.2 TS1M0
		Microsoft Windows XP Professional	9.1 TS1M3 SP4	9.2 TS1M0
		64-bit Enabled AIX	9.1 TS1M3 SP4	9.2 TS1M0
		64-bit Enabled HP-UX	9.1 TS1M3 SP4	9.2 TS1M0
		64-bit Enabled Solaris	9.1 TS1M3 SP4	9.2 TS1M0
		Linux on Itanium	9.1 TS1M3 SP4	9.2 TS1M0

* For software releases that are not yet generally available, the Fixed Release is the software release in which the problem is planned to be fixed.

A fix for SAS 9.1.3 (9.1 TS1M3) for this issue is available at:

http://www.sas.com/techsup/download/hotfix/e9_sbcs_prod_list.html#031002

A fix for SAS 9.1.3 (9.1 TS1M3) with Asian Language Support (DBCS) for this issue is available at:

http://www.sas.com/techsup/download/hotfix/e9_dbcs_prod_list.html#031002

When using PROC METALIB and the MPRINT option, clear text passwords appear in the SAS log

Type:	Problem Note
Priority:	high

Date Modified:	2008-02-01 09:21:24
Date Created:	2008-01-24 11:06:19