[11789] in bugtraq
Redhat 6.0 Password Issues
daemon@ATHENA.MIT.EDU (root3d)
Thu Sep  9 19:18:20 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-Id:  <37D6CBF7.8AAF46E6@antioffline.com>
Date:         Wed, 8 Sep 1999 16:49:59 -0400
Reply-To: root3d <joquendo@SITEAMERICA.COM>
From: root3d <joquendo@SITEAMERICA.COM>
X-To:         BUGTRAQ@SECURITYFOCUS.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Gentleman;
I submitted what I thought was a minor issue on Redhat's handling
of passwords. Is it me? Is it something I missed? Any password you
assign over 8 characters gets cut...
At first I thought it was my system but its not since I tested it at
home,
but then at work its the same thing:
------snip------
passwd
I typed it p4$sW3rd$ as my password
but I was able to log in using p4$sW3rD
ctrl-alt-del
bash
$
passwd
changed it to 1234567899999
and I was able to log in using:
12345678
-----endsnip-----
Does anyone else know of this?
Has anyone heard of this?
by the way I bcc'd this to Redhat as well. ;)
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Yours Truly
J. Oquendo
sil@antioffline.com
sil@macroshaft.org
"Linux -- Where you really can go tommorow"
ID 0x1281EC4F
DH/DSS
4096/1024
CIPHER: CAST
PGP Fingerprint
46C0 6A83 E6D2 FEA6 383A  B9A6 44D3 4E77 1281 EC4F
-----BEGIN PGP SIGNATURE-----
Version: PGP Personal Privacy 6.0.2
iQA/AwUBN6d/aETTTncSgexPEQLuAgCfRF5dpZii9yEPnqZ+F+
AEbzB+KL0An3mXPk+Y8lZxkr0crgw72zPX5w71=tCpK
-----END PGP SIGNATURE-----