Bugtraq mailing list archives
gdm thing
From: kermit () TOWER COM AR (Kermit the Frog)
Date: Sun, 5 Dec 1999 23:44:18 -0300
Hello! while trying this new soft to replace the ``old'' xdm, I found out that if a wrong passwd is supplied, gdm will answer with a ``incorrect password'' message. So I tried to log in as an inexistent user ... the result was "user unknown". The vulnerabilty seems trivial to me. The version tested was gdm-2.0beta4. Best regards. Cervi~no Ulises <kermit () tower com ar> <ulises () rosario linux org ar> ............................................................................... "Contrary to popular opinion, Unix is user friendly, It just happens to be very selective about who it makes friends with."
Current thread:
- gdm thing Kermit the Frog (Dec 05)
- <Possible follow-ups>
- Re: gdm thing Martin K. Petersen (Dec 06)