Vulnerability Development mailing list archives

Re: vlock bug ? (fwd)


From: marcys () FREE COM PL (m4rcyS)
Date: Thu, 18 Nov 1999 13:48:39 +0100


Plz take a look at these 2 posts below and try this by yourself.

I'm using RH6.1 (vlock-1.3-2) and definitely I'm NOT using the same
password for root and marcys :)

---------- Forwarded message ----------
Date: Wed, 17 Nov 1999 10:44:51 -0500
From: Michael K. Johnson <johnsonm () redhat com>
To: m4rcyS <marcys () free com pl>
Cc: Michael K. Johnson <johnsonm () redhat com>
Subject: Re: vlock bug ?

I am unable to reproduce this.  I can't imagine what could possibly
cause it, either, other than using the same password for root and
for marcys, which I presume you are not doing...

michaelkjohnson

"Magazines all too frequently lead to books and should be regarded by the
 prudent as the heavy petting of literature."            -- Fran Lebowitz
 Linux Application Development     http://people.redhat.com/johnsonm/lad/

m4rcyS writes:

hi,

Plz take a look at this:

[>[marcys@pentium marcys]$ vlock
This TTY is now locked.
Use Alt-function keys to switch to other virtual consoles.
Please enter the password to unlock.
marcys's Password:             [invalid passwd typed here]
root's Password:               [valid MARCYS's passwd typed]
[>[marcys@pentium marcys]$
      
Shouldn't vlock accept root's passwd except marcys's passwd?


greetz,
____________________________________________________________
                             m4rcyS

                  email: marcys () free com pl, m () sh pl

"I think there is a world market for maybe five computers."
                    - Thomas Watson, chairman of IBM, 1943
------------------------------------------------------------



Current thread: