Subject: Re: bin/457: passwd-checking bug in login ?
To: None <toor@wipux2.wifo.uni-mannheim.de>
From: Charles M. Hannum <mycroft@gnu.ai.mit.edu>
List: netbsd-bugs
Date: 09/04/1994 19:26:57
First I'm not sure if there is just a fault in my passwd
I'd be pleased if you could tell me that it was not or is
reproducable at your place.
I use a '*' to lock accounts like 'daemon','bin' and I had
also locked 'guest' like this. Somebody just pressed 'return'
when asked for Password and was let in.
I recall an old bug luck this in an early version of the non-US
`securedist' crypt(3), but I thought it was fixed a long time ago.
------------------------------------------------------------------------------