Date: Sun, 23 Feb 1997 09:04:23 -0800 (PST) From: froden@bigblue.no To: freebsd-gnats-submit@freebsd.org Subject: bin/2804: /usr/sbin/login reports: "root login refused on this terminal." when it should report "Login incorrect" Message-ID: <199702231704.JAA18706@freefall.freebsd.org> Resent-Message-ID: <199702231710.JAA18959@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 2804 >Category: bin >Synopsis: /usr/sbin/login reports: "root login refused on this terminal." when it should report "Login incorrect" >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Sun Feb 23 09:10:01 PST 1997 >Last-Modified: >Originator: Frode Nordahl >Organization: Big Blue Systems AS >Release: 2.1.5-RELEASE / 2.1.7-RELEASE >Environment: FreeBSD login.bigblue.no 2.1.5-RELEASE FreeBSD 2.1.5-RELEASE #0: Fri Feb 21 13:26:04 MET 1997 root@login.bigblue.no:/usr/src/sys/compile/LOGIN i386 >Description: When telneting into, or using any non-secure port on a FreeBSD system, /usr/sbin/login reports "root login refused on this terminal." when you try to log in as root with correct password. It should however report "Login incorect" no matter if the password is correct or not, if not outside users can test and find out what your root password is without even loging in. >How-To-Repeat: telnet to a FreeBSD machine and login with root with correct password. >Fix: Alter /usr/sbin/login to report "Login incorect" instead of "login refused on this terminal" ? >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199702231704.JAA18706>