[BusyBox 0000415]: vlock accepts any passwd when using shadow

bugs at busybox.net bugs at busybox.net
Tue Sep 6 21:32:21 UTC 2005


The following issue has been SUBMITTED. 
====================================================================== 
http://busybox.net/bugs/view.php?id=415 
====================================================================== 
Reported By:                mleun
Assigned To:                BusyBox
====================================================================== 
Project:                    BusyBox
Issue ID:                   415
Category:                   Security
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             09-06-2005 14:32 PDT
Last Modified:              09-06-2005 14:32 PDT
====================================================================== 
Summary:                    vlock accepts any passwd when using shadow
Description: 
if CONFIG_FEATURE_SHADOWPASSWDS=y vlock accepts any password to unlock
console

(also in snapshot)
====================================================================== 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
09-06-05 14:32  mleun          New Issue                                    
09-06-05 14:32  mleun          Status                   new => assigned     
09-06-05 14:32  mleun          Assigned To               => BusyBox         
======================================================================




More information about the busybox-cvs mailing list