>Number:         416
>Category:       bin
>Synopsis:       passwd -y as root core dumps, no old password sent to rpc
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    gnats-admin (Utility Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Tue Aug 16 12:05:03 1994
>Originator:     Mats O Jansson
>Organization:
CelsiusTech Systems AB, Jaerfaella, Sweden
>Release:        NetBSD 1.0_BETA and at least since NetBSD-Current 94-APR-24.
>Environment:
Running as root on at least i386 and Sparc.
System: NetBSD sunny.celsiustech.se 1.0_BETA NetBSD 1.0_BETA (SPARC) #1: Mon Aug 8 23:40:30 MET DST 1994 ppan@sunny.celsiustech.se:/usr/src/sys/arch/sparc/compile/SPARC sparc


>Description:
If root tries to change password on a user with the help NIS,
               passwd will core dump. This is because the code woun't ask
               root for the users old password. And later the xdr routine
               will have a NULL pointer and that seems to cause the core
               dump.

>How-To-Repeat:Login as root on a NIS-client and try one of the following
               commands:

               sunny# passwd nonlocal
               Changing YP password for nonlocal.
               New password:
               Retype new password:
               Segmentation fault (core dumped)

               or

               sunny# passwd -y local
               Changing YP password for local.
               New password:
               Retype new password:
               Segmentation fault (core dumped)

>How-To-Repeat:
>Fix:
Always ask for users old password when changing password
               through NIS. root on a client isn't neccesary root on the
               NIS server.

>Audit-Trail:
>Unformatted:


------------------------------------------------------------------------------