sshd bug?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Hi,

I've found a bug/problem with my centos 5.5 server. Any users who have
a password of 9 characters or more, only the first 9 characters are
used by the OS...
eg. i set my password to "123456789" and i try logon via ssh with
password "123456789ofgjdfuh" - it lets me in.
 and if i set my password to "qwertasdfGHJB" and i enter
"qwertasdfSDWQWSDS" - it lets me in...

The 'passwd' command only recognises the first 9 characters too...

Has anyone seen this before, or know how to fix it? I feel its a major
security risk and would like it fixed ASAP.

Thanks,
Matt
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux