Bug#415098: dbconfig can create tiny random passwords

2007-03-15 Thread sean finney
hey shish, On Fri, 2007-03-16 at 02:40 +, Shish wrote: > The package I noticed this in was nagios-mysql; the first install I did > created a nice, long, random looking password. Then I scrapped the > install and redid things from scratch, resulting in: > > #xsddb_host= > #xsddb_port= > xsddb_

Bug#415098: dbconfig can create tiny random passwords

2007-03-15 Thread Shish
Package: dbconfig-common Version: 1.8.29+etch1 Severity: minor While I am aware that the password "8" is just as totally random as "Af3fS35xF", I feel that it's worryingly close to the beginning of the search space for a brute force attack -- I will confess that I'm no security expert, but might i