[5812] in bugtraq
Re: debian pppd chatscript
daemon@ATHENA.MIT.EDU (Wichert Akkerman)
Tue Dec 16 14:44:41 1997
Date: Tue, 16 Dec 1997 18:01:12 +0100
Reply-To: Wichert Akkerman <wichert@WI.LEIDENUNIV.NL>
From: Wichert Akkerman <wichert@WI.LEIDENUNIV.NL>
X-To: Stephen Hardman <hardguy@CONTINUITY.IT.NET.AU>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <m0xhXip-0002bAC@continuity.it.net.au>; from Stephen Hardman on
Mon, Dec 15, 1997 at 06:25:59PM +0800
--bp/iNruPH9dso1Pn
Content-Type: text/plain; charset=us-ascii
Previously Stephen Hardman wrote:
> I should probably send it off to a debian bug/security
> list as well... but it's quite relavent here.
We received it.
> This didn't happen until I recently reinstalled Debian.
There was a bug in one of the Debian packages with the example
chatscript. The error was that there was a line like the following:
assword: \qPaSsWoRd\q
Since \q is a toggle, the second \q toggles the do-no-display flag
and the password is faithfully echoed to the syslog.
Please check if you did not make the same error in your script.
We cannot check anything without some more information.
Wichert.
--bp/iNruPH9dso1Pn
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
iQB1AwUBNJaz2KjZR/ntlUftAQErIgMAkp0AH6NqCjxaDjnxPUJ5kgOUDBLHTJe8
0lrfIs2dkPf4HQgmGU342pfWvY7Xqr0N/QubK2G8TpwMLBHukISkT9fsVxcbxJr/
qrEXNkDxsjDz4ZacQbvtD3gJAi5aSa9S
=QaT2
-----END PGP SIGNATURE-----
--bp/iNruPH9dso1Pn--
