[1864] in SIPB_Linux_Development
login security hole
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Oct 22 22:52:15 1997
Date: Wed, 22 Oct 1997 22:51:53 -0400 (EDT)
From: Greg Hudson <ghudson@MIT.EDU>
To: linux-dev@MIT.EDU
Until very recently, /afs/sipb/project/sipb-athena/src/login/login.c
had a bad security hole involving local accounts with the password
'*'. If there are any machines using that version of login instead of
the Linux version, please make sure to rebuild and reinstall login.
(Redhat-Athena 4.0 machines do not appear to be affected.)
