[Bug 971] keyboard-interactive/pam leaks info about user existence

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Jan 11 18:12:23 EST 2005


http://bugzilla.mindrot.org/show_bug.cgi?id=971





------- Additional Comments From dtucker at zip.com.au  2005-01-11 18:12 -------
Created an attachment (id=766)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=766&action=view)
Feed bogus input to PAM for invalid logins

Note: you will need to apply *both* patches (#765 and #766) to completely fix
the problem.

Patch #766 partially by Colin Watson.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.




More information about the openssh-bugs mailing list