openssh reveals existing accounts?

[Florin Andrei]

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=57859

There's a method to see if an account exists or not: if it does exist,
and the password fails, there's a small delay before getting the prompt
again. But if it doesn't, the password prompt returns immediately.
Looks like a bug... :o)

-- 
Florin Andrei

Linux Is Not "gnU linuX"


---------------------------------------------------------------------
To unsubscribe, e-mail: secureshell-unsubscribe at securityfocus.com
For additional commands, e-mail: secureshell-help at securityfocus.com