Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAA7hUgG-FHa58OksWdudn5bg6YnQH97KBzBQMg7GWd1yRYGCJg@mail.gmail.com>
Date: Mon, 9 Dec 2013 14:46:51 +0100
From: Raphael Geissert <geissert@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: CVE request: pam: password hashes aren't compared case-sensitively

Hi Solar,

On 9 December 2013 13:39, Solar Designer <solar@...nwall.com> wrote:
> [...]  I hope people aren't using it because it looks unsuitable
> for use, but I'm probably wrong.

This one is going to be hard to kill, it's all over the internet in
the usual "HOWTO [not] forge", like:

https://help.ubuntu.com/community/vsftpd#Create_The_Virtual_Users_Database

Cheers,
-- 
Raphael Geissert - Debian Developer
www.debian.org - get.debian.net

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.