Home page logo
/

bugtraq logo Bugtraq mailing list archives

gdm thing
From: kermit () TOWER COM AR (Kermit the Frog)
Date: Sun, 5 Dec 1999 23:44:18 -0300


Hello! while trying this new soft to replace the ``old'' xdm, I found out
that if a wrong passwd is supplied, gdm will answer with a ``incorrect
password'' message. So I tried to log in as an inexistent user ... the
result was "user unknown". The vulnerabilty seems trivial to me.

The version tested was gdm-2.0beta4.

Best regards.

                           Cervi~no Ulises
<kermit () tower com ar> <ulises () rosario linux org ar>
...............................................................................
"Contrary to popular opinion, Unix is user friendly, It just happens to be
 very selective about who it makes friends with."


  By Date           By Thread  

Current thread:
  • gdm thing Kermit the Frog (Dec 06)
    • <Possible follow-ups>
    • Re: gdm thing Martin K. Petersen (Dec 06)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]