Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: vlock bug ? (fwd)

Re: vlock bug ? (fwd)

From: Hull, Dave <dphull_at_MAIL.UKANS.EDU>
Date: Fri, 19 Nov 1999 08:24:18 -0600

I can duplicate this behavior on my RH 6.0 machine. I'm running 2.2.13. When
it prompts for root's password it won't accept it, but after that it goes
back to asking for the user's password, entering the wrong one again causes
it to ask again for root's password...

Dave Hull, Senior Information Technology Analyst
LAN Support Services, University of Kansas

> -----Original Message-----
> From: m4rcyS [mailto:marcys_at_FREE.COM.PL]
> Sent: Thursday, November 18, 1999 6:49 AM
> To: VULN-DEV_at_SECURITYFOCUS.COM
> Subject: Re: vlock bug ? (fwd)
>
>
> Plz take a look at these 2 posts below and try this by yourself.
>
> I'm using RH6.1 (vlock-1.3-2) and definitely I'm NOT using the same
> password for root and marcys :)
>
>
> ---------- Forwarded message ----------
> Date: Wed, 17 Nov 1999 10:44:51 -0500
> From: Michael K. Johnson <johnsonm_at_redhat.com>
> To: m4rcyS <marcys_at_free.com.pl>
> Cc: Michael K. Johnson <johnsonm_at_redhat.com>
> Subject: Re: vlock bug ?
>
>
> I am unable to reproduce this. I can't imagine what could possibly
> cause it, either, other than using the same password for root and
> for marcys, which I presume you are not doing...
>
> michaelkjohnson
>
> "Magazines all too frequently lead to books and should be
> regarded by the
> prudent as the heavy petting of literature." --
> Fran Lebowitz
> Linux Application Development
> http://people.redhat.com/johnsonm/lad/
>
>
> m4rcyS writes:
> >
> >hi,
> >
> >Plz take a look at this:
> >
> >[> >[marcys_at_pentium marcys]$ vlock
> >This TTY is now locked.
> >Use Alt-function keys to switch to other virtual consoles.
> >Please enter the password to unlock.
> >marcys's Password: [invalid passwd typed here]
> >root's Password: [valid MARCYS's passwd typed]
> >[> >[marcys_at_pentium marcys]$
> >
> >Shouldn't vlock accept root's passwd except marcys's passwd?
> >
> >
> >greetz,
> >____________________________________________________________
> > m4rcyS
> >
> > email: marcys_at_free.com.pl, m_at_sh.pl
> >
> >"I think there is a world market for maybe five computers."
> > - Thomas Watson, chairman of IBM, 1943
> >------------------------------------------------------------
> >
>
Received on Nov 19 1999

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos