From owner-freebsd-bugs  Tue Jun 27 12:50:14 2000
Delivered-To: freebsd-bugs@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21])
	by hub.freebsd.org (Postfix) with ESMTP id B85BE37BE24
	for <freebsd-bugs@FreeBSD.org>; Tue, 27 Jun 2000 12:50:01 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: (from gnats@localhost)
	by freefall.freebsd.org (8.9.3/8.9.2) id MAA54582;
	Tue, 27 Jun 2000 12:50:01 -0700 (PDT)
	(envelope-from gnats@FreeBSD.org)
Received: by hub.freebsd.org (Postfix, from userid 32767)
	id AA41137C2D4; Tue, 27 Jun 2000 12:40:13 -0700 (PDT)
Message-Id: <20000627194013.AA41137C2D4@hub.freebsd.org>
Date: Tue, 27 Jun 2000 12:40:13 -0700 (PDT)
From: john@jfive.com
To: freebsd-gnats-submit@FreeBSD.org
X-Send-Pr-Version: www-1.0
Subject: misc/19548: DES in 3.5-RELEASE allows trailing characters
Sender: owner-freebsd-bugs@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>Number:         19548
>Category:       misc
>Synopsis:       DES in 3.5-RELEASE allows trailing characters
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Tue Jun 27 12:50:01 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     John Heyer
>Release:        3.5-RELEASE
>Organization:
J Five
>Environment:
FreeBSD proxy3.10MB.supranet.net 3.5-RELEASE FreeBSD 3.5-RELEASE #0: Tue Jun 27 12:29:24 CDT 2000     root@bench1.supranet.int:/usr/src/sys/compile/PROXY-IDE  i386        
>Description:
I can login using any password, provided my real password is the first substring.  
For example if my password was "plant", a password of "plant72495" will authenticate.  
>How-To-Repeat:
install DES and set a password.  Then login, inserting random characters after your correct password
>Fix:
Uninstalling DES fixes it.  

>Release-Note:
>Audit-Trail:
>Unformatted:


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message