[Bug 971] keyboard-interactive/pam leaks info about user existence
bugzilla-daemon at mindrot.org
bugzilla-daemon at mindrot.org
Tue Jan 11 18:12:23 EST 2005
http://bugzilla.mindrot.org/show_bug.cgi?id=971
------- Additional Comments From dtucker at zip.com.au 2005-01-11 18:12 -------
Created an attachment (id=766)
--> (http://bugzilla.mindrot.org/attachment.cgi?id=766&action=view)
Feed bogus input to PAM for invalid logins
Note: you will need to apply *both* patches (#765 and #766) to completely fix
the problem.
Patch #766 partially by Colin Watson.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
More information about the openssh-bugs
mailing list