[5808] in bugtraq
Re: debian pppd chatscript
daemon@ATHENA.MIT.EDU (TARBY)
Tue Dec 16 14:15:57 1997
Date: Tue, 16 Dec 1997 17:40:28 +0100
Reply-To: TARBY <tarby@FREESIDE.ELTE.HU>
From: TARBY <tarby@FREESIDE.ELTE.HU>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <m0xhXip-0002bAC@continuity.it.net.au>
On 15-Dec-97 Stephen Hardman wrote:
>This is a bit old, but someone else noticed this and then it
>started happening on my machine.
>
>The default logfile (/var/log/ppp.log) is world readable by default.
[...]
>Dec 14 16:43:15 gateway chat[362]: Password -- got it
>Dec 14 16:43:15 gateway chat[362]: send (MyPassWoRd^M)
>
>So it seems it is not hiding the sent password as it should
>do when the password is preceeded by \q in /etc/ppp.chatscript.
If you put \q in the previous line eg.:
-8<---
OK ATDTisp-number
ogin: \qMyUsername
assword: MyPassword
-8<---
It worked for me this way. This may be a bug in pppd but the 'workaround' is
easy. :) BTW in my opinion it's better to use PAP etc...
C'ya!
Peter Tarbaj
