Re: Security bug - Password ignored

Micah Cowan <[email protected]> Tue, 17 Mar 2009 10:19:39 -0700
Newsgroups gmane.comp.gnu.screen
Message-ID <49BFDBAB.1000903__2617.56461482054$1238089174$gmane$org@cowan.name>
Andreas wrote:
> Hi!
> 
> Because this problem was found in the screen-users mailing list in 2004,
> again 2008, and is still present, I'm writing to screen-devel:
> I'm using screen in a ssh-Terminal (Putty)
> 
> .screenrc:
> password
> -> starting screen says "/home/Andreas/.screenrc: password: window required"
> 
> .screenrc:
> password sg-md5-crypted
> --> Screen asks for a password, but I can reattach with any/empty
> password! (Screen asks for a a password!!)

I can't reproduce this in the current development sources (in fact, I
seem to get the opposite problem: no password is accepted).

-- 
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer.
Maintainer of GNU Wget and GNU Teseq
http://micah.cowan.name/