gdm thing

Subject: gdm thing
From: Kermit the Frog (kermitTOWER.COM.AR)
Date: Sun Dec 05 1999 - 20:44:18 CST

• Next message: Jeremy Kothe: "new IE5 remote exploit"
• Previous message: David LeBlanc: "Re: Microsoft Security Bulletin (MS99-051) (fwd)"
• Next in thread: Martin K. Petersen: "Re: gdm thing"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Hello! while trying this new soft to replace the ``old'' xdm, I found out
that if a wrong passwd is supplied, gdm will answer with a ``incorrect
password'' message. So I tried to log in as an inexistent user ... the
result was "user unknown". The vulnerabilty seems trivial to me.

The version tested was gdm-2.0beta4.

Best regards.

                           Cervi~no Ulises
<kermittower.com.ar> <ulisesrosario.linux.org.ar>
...............................................................................
"Contrary to popular opinion, Unix is user friendly, It just happens to be
 very selective about who it makes friends with."

• Next message: Jeremy Kothe: "new IE5 remote exploit"
• Previous message: David LeBlanc: "Re: Microsoft Security Bulletin (MS99-051) (fwd)"
• Next in thread: Martin K. Petersen: "Re: gdm thing"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b27 : Mon Dec 06 1999 - 12:36:43 CST