|[Home] [Credit Search] [Category Browser] [Staff Roll Call]||The LINUX.COM Article Archive|
|Originally Published: Wednesday, 8 December 1999||Author: Quentin Cregan|
|Published to: news_enhance_security/Security News||Page: 1/1 - [Std View]|
gdm-2.0beta4 - gives away hints
[BugTraq] "Hello! while trying this new soft to replace the ``old'' xdm, I found out that if a wrong passwd is supplied, gdm will answer with a ``incorrect password'' message. So I tried to log in as an inexistent user ... the result was "user unknown". The vulnerabilty seems trivial to me."