[Bug 755] PermitEmptyPasswords ignored

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=755

           Summary: PermitEmptyPasswords ignored
           Product: Portable OpenSSH
           Version: -current
          Platform: UltraSparc
        OS/Version: Solaris
            Status: NEW
          Severity: critical
          Priority: P2
         Component: sshd
        AssignedTo: openssh-bugs at mindrot.org
        ReportedBy: Frank.Beckmann at vodafone.com


Hi

there ist a big Problem, user with empty Passwords can Login.
The User has no Password in the shadow file ...

He makes a connect with Putty, write his name in the prompt and Press enter
login as: wparling
Last login: Thu Nov  6 09:44:31 2003 from 10.128.77.18

Verarbeite Gruppe(n) UNIXADM
Lade Modul(e) basis rootstuff legato perl5.6.1 sybase-oc12 visualws6.2 tclx
wparling at systemxx:/home/wparling $

We dont use agents, or other things...

The Source is patched with Darrens password expired patch.

Frank

ssh -V
OpenSSH_3.7.1p2-pwexp24, SSH protocols 1.5/2.0, OpenSSL 0.9.7c 30 Sep 2003



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.