[Bug 222668] New: login discloses non-existing usernames
https://bugzilla.novell.com/show_bug.cgi?id=222668 Summary: login discloses non-existing usernames Product: openSUSE 10.2 Version: Beta 2 Platform: i686 OS/Version: SuSE Other Status: NEW Severity: Critical Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: fmfischer@gmx.net QAContact: qa@suse.de When entering a non-existing username at the login prompt, one does not get the password prompt but: "Login fehlgeschlagen" (login failed) right away. I suggest a linux system should not disclose to someone who is not logged in already whether a username exists on this system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
https://bugzilla.novell.com/show_bug.cgi?id=222668 lnussel@novell.com changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |DUPLICATE ------- Comment #1 from lnussel@novell.com 2006-11-20 09:02 MST ------- *** This bug has been marked as a duplicate of bug 221233 *** -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.
participants (1)
-
bugzilla_noreply@novell.com