Minor bug in su shell util.

Khan Alamgir <[email protected]> Wed, 22 May 2002 10:53:31 +0200
Newsgroups gmane.comp.gnu.sh-utils.bugs
Message-ID <E92C3782D93CB44E93F2BDDF801293BC0BA367@backup>
Hi there,
It seems that su accepts valid password (unix) more than 8 characters. But
it just reads first 8 chars and authenticates if the user name and first 8
chars of the password is a valid user account. My colleguge has detected it.


Bug Input:
1. Valid unix usr account: 
     
            login: <root>
            pwd:  <password>
2. Bug simulation:
           enter cmd su:
           Enter login: <root>
           Enter pwd:  <passwordbuggysu>
util. su will authenticate you successfully. It is a bug, isn't it? But try
to logon to a unix/linux terminal, it will throw you out:-))  We tested it
with Linux 2.4.10. 

We hope that the bug will be fixed in the next release. 

Regards,

Unix users