reassign 498236 login
forcemerge 443322 498236
thanks

On Mon, Sep 08, 2008 at 01:50:19PM +0200, Roberto Lumbreras wrote:
> In the console login prompt entering a non-existent login you get
> a "Login incorrect" message WITHOUT being asked for any password.

> This is a serious security hole, because pam are revealing information
> about the accounts there are in the system.

> Version 1.0.1 of the pam packages seem to have the same problem.

Duplicate of bug #443322, which has been fixed.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
[EMAIL PROTECTED]                                     [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to