Subject: lib/30149: libtelnet SRA loops with EOF on user name
To: None <lib-bug-people@netbsd.org, gnats-admin@netbsd.org,>
From: None <gcw@primenet.com.au>
List: netbsd-bugs
Date: 05/06/2005 03:22:00
>Number:         30149
>Category:       lib
>Synopsis:       give EOF as username to telnet SRA style login causes bad loop
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    lib-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri May 06 03:22:00 +0000 2005
>Originator:     Geoff C. Wing
>Release:        NetBSD 3.99.3
>Organization:
>Environment:
System: NetBSD g.primenet.com.au 3.99.3 NetBSD 3.99.3 (G) #0: Fri May 6 08:24:07 EST 2005 gcw@g.primenet.com.au:/usr/netbsd/src/sys/arch/i386/compile/G i386
Architecture: i386
Machine: i386
>Description:
	% telnet localhost
	...
	Trying SRA secure login:
	User (myloginname): <-- EOF here gives next line
	User (myloginname): Password: <-- any line here gives next 2 lines
	[ SRA login failed ]
	Password: User (myloginname): <-- any line here repeats the 2 lines

	You have to wait for it to time out to exit.

	Didn't telnet used to only allow a limited number of login attempts?
	I had 435 with this and I think it stopped because it timed out not
	because of a number of attempts limit.
	
>How-To-Repeat:
	see above
>Fix:
	?