oss-sec mailing list archives

Re: CVE request: pam: password hashes aren't compared case-sensitively

From: Raphael Geissert <geissert () debian org>
Date: Mon, 9 Dec 2013 14:46:51 +0100

Hi Solar,

On 9 December 2013 13:39, Solar Designer <solar () openwall com> wrote:

[...]  I hope people aren't using it because it looks unsuitable
for use, but I'm probably wrong.


This one is going to be hard to kill, it's all over the internet in
the usual "HOWTO [not] forge", like:

https://help.ubuntu.com/community/vsftpd#Create_The_Virtual_Users_Database

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Current thread:

CVE request: pam: password hashes aren't compared case-sensitively Ratul Gupta (Dec 09)
- Re: CVE request: pam: password hashes aren't compared case-sensitively Solar Designer (Dec 09)
  - Re: CVE request: pam: password hashes aren't compared case-sensitively Raphael Geissert (Dec 09)
- Re: CVE request: pam: password hashes aren't compared case-sensitively cve-assign (Dec 09)