Minor bug in su shell util.
Khan Alamgir <[email protected]> Wed, 22 May 2002 10:53:31 +0200
| Newsgroups | gmane.comp.gnu.sh-utils.bugs |
|---|---|
| Message-ID | <E92C3782D93CB44E93F2BDDF801293BC0BA367@backup> |
Hi there,
It seems that su accepts valid password (unix) more than 8 characters. But
it just reads first 8 chars and authenticates if the user name and first 8
chars of the password is a valid user account. My colleguge has detected it.
Bug Input:
1. Valid unix usr account:
login: <root>
pwd: <password>
2. Bug simulation:
enter cmd su:
Enter login: <root>
Enter pwd: <passwordbuggysu>
util. su will authenticate you successfully. It is a bug, isn't it? But try
to logon to a unix/linux terminal, it will throw you out:-)) We tested it
with Linux 2.4.10.
We hope that the bug will be fixed in the next release.
Regards,
Unix users