[11789] in bugtraq

home help back first fref pref prev next nref lref last post

Redhat 6.0 Password Issues

daemon@ATHENA.MIT.EDU (root3d)
Thu Sep 9 19:18:20 1999

Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id:  <37D6CBF7.8AAF46E6@antioffline.com>
Date:         Wed, 8 Sep 1999 16:49:59 -0400
Reply-To: root3d <joquendo@SITEAMERICA.COM>
From: root3d <joquendo@SITEAMERICA.COM>
X-To:         BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM

Gentleman;

I submitted what I thought was a minor issue on Redhat's handling
of passwords. Is it me? Is it something I missed? Any password you
assign over 8 characters gets cut...

At first I thought it was my system but its not since I tested it at
home,
but then at work its the same thing:

------snip------
passwd

I typed it p4$sW3rd$ as my password
but I was able to log in using p4$sW3rD

ctrl-alt-del
bash
$
passwd
changed it to 1234567899999
and I was able to log in using:
12345678
-----endsnip-----

Does anyone else know of this?
Has anyone heard of this?

by the way I bcc'd this to Redhat as well. ;)

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Yours Truly
J. Oquendo
sil@antioffline.com
sil@macroshaft.org


"Linux -- Where you really can go tommorow"

ID 0x1281EC4F
DH/DSS
4096/1024
CIPHER: CAST
PGP Fingerprint
46C0 6A83 E6D2 FEA6 383A  B9A6 44D3 4E77 1281 EC4F

-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2

iQA/AwUBN6d/aETTTncSgexPEQLuAgCfRF5dpZii9yEPnqZ+F+
AEbzB+KL0An3mXPk+Y8lZxkr0crgw72zPX5w71=tCpK
-----END PGP SIGNATURE-----

home help back first fref pref prev next nref lref last post