Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 23 Jan 1997 12:30:04 -0800 (PST)
From:      j@uriah.heep.sax.de (J Wunsch)
To:        freebsd-bugs
Subject:   Re: bin/2560: login accepts bad passwd and logs user in
Message-ID:  <199701232030.MAA10256@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help
The following reply was made to PR bin/2560; it has been noted by GNATS.

From: j@uriah.heep.sax.de (J Wunsch)
To: jcwells@u.washington.edu
Cc: FreeBSD-gnats-submit@freebsd.org
Subject: Re: bin/2560: login accepts bad passwd and logs user in
Date: Thu, 23 Jan 1997 21:02:50 +0100

 As Jason Wells wrote:
 
 > Login accepts password that is known to be bad. If the user
 > accidentally adds characters to the end of a correct password login
 > does not reject the login. If your password was 'password' and you
 > entered 'passwordxx' login willaccept the password.
 
 That's a known problem.  There are only 8 significant characters in a
 password.  So the password wasn't ``bad'' per se.
 
 -- 
 cheers, J"org
 
 joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
 Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199701232030.MAA10256>