Lc.DB — the Linux.com Article Museum
Originally published: Wednesday, 8 December 1999 Author: Quentin Cregan
Published to: news_enhance_security/Security News Page: 1/1   [Standard view]

gdm-2.0beta4 - gives away hints

[BugTraq] "Hello! while trying this new soft to replace the ``old'' xdm, I found out that if a wrong passwd is supplied, gdm will answer with a ``incorrect password'' message. So I tried to log in as an inexistent user ... the result was "user unknown". The vulnerabilty seems trivial to me."

(this article had no body text)