[BusyBox 0000415]: vlock accepts any passwd when using shadow

bugs at busybox.net bugs at busybox.net
Sun Dec 18 20:35:10 UTC 2005


The following issue has been CLOSED 
====================================================================== 
http://busybox.net/bugs/view.php?id=415 
====================================================================== 
Reported By:                mleun
Assigned To:                BusyBox
====================================================================== 
Project:                    BusyBox
Issue ID:                   415
Category:                   Security
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     closed
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             09-06-2005 14:32 PDT
Last Modified:              12-18-2005 12:35 PST
====================================================================== 
Summary:                    vlock accepts any passwd when using shadow
Description: 
if CONFIG_FEATURE_SHADOWPASSWDS=y vlock accepts any password to unlock
console

(also in snapshot)
====================================================================== 

---------------------------------------------------------------------- 
 landley - 12-18-05 12:35  
---------------------------------------------------------------------- 
svn 12949 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
09-06-05 14:32  mleun          New Issue                                    
09-06-05 14:32  mleun          Status                   new => assigned     
09-06-05 14:32  mleun          Assigned To               => BusyBox         
12-18-05 12:35  landley        Status                   assigned => closed  
12-18-05 12:35  landley        Note Added: 0000798                          
======================================================================




More information about the busybox-cvs mailing list