|[Home] [Credit Search] [Category Browser] [Staff Roll Call]||The LINUX.COM Article Archive|
|Originally Published: Friday, 3 December 1999||Author: Quentin Cregan|
|Published to: news_enhance_security/Security News||Page: 1/1 - [Std View]|
Slackware 7.0 login bug?
There has been discussion of a login bug on BugTraq, in Slackware 7.0 that grants the potential for brute force attacks. The bug involves the way that authorisation code is called when a uid is locked or does not exist. As far as I can tell, this is useful in discovering usernames, but I may well be wrong.