reassign 498236 login forcemerge 443322 498236 thanks On Mon, Sep 08, 2008 at 01:50:19PM +0200, Roberto Lumbreras wrote: > In the console login prompt entering a non-existent login you get > a "Login incorrect" message WITHOUT being asked for any password.
> This is a serious security hole, because pam are revealing information > about the accounts there are in the system. > Version 1.0.1 of the pam packages seem to have the same problem. Duplicate of bug #443322, which has been fixed. -- Steve Langasek Give me a lever long enough and a Free OS Debian Developer to set it on, and I can move the world. Ubuntu Developer http://www.debian.org/ [EMAIL PROTECTED] [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]