Originally Published: Wednesday, 8 December 1999 Author: Quentin Cregan
Published to: news_enhance_security/Security News Page: 1/1 - [Printable]

gdm-2.0beta4 - gives away hints

[BugTraq] "Hello! while trying this new soft to replace the ``old'' xdm, I found out that if a wrong passwd is supplied, gdm will answer with a ``incorrect password'' message. So I tried to log in as an inexistent user ... the result was "user unknown". The vulnerabilty seems trivial to me."