Subject: Re: bin/457: passwd-checking bug in login ?
To: None <toor@wipux2.wifo.uni-mannheim.de>
From: Charles M. Hannum <mycroft@gnu.ai.mit.edu>
List: netbsd-bugs
Date: 09/04/1994 19:26:57
	   First I'm not sure if there is just a fault in my passwd
	   I'd be pleased if you could tell me that it was not or is
	   reproducable at your place.
	   I use a '*' to lock accounts like 'daemon','bin' and I had
	   also locked 'guest' like this. Somebody just pressed 'return'
	   when asked for Password and was let in.

I recall an old bug luck this in an early version of the non-US
`securedist' crypt(3), but I thought it was fixed a long time ago.


------------------------------------------------------------------------------