RE: [cobalt-users] Security Issue?

["Dan Kriwitsky" <webhosting@xxxxxxxxx>]

> I was wondering if anyone has seen this kind of madness on a 
> raq or other rh linux based system.  If I create the password 
> <12345!> for my admin user account and then try logging in 
> using, say, <12345> withouth the !, it lets me in no problem. 
>  I noticed this works for the shell and the gui, so it's not 
> some ssh glitch.  Does this have something to with the use of 
> <> in the password?
> 

How many characters? The way, (I think it's a Linux limitation), works
is everything after 8 characters is tossed. So if it's <12345678> then
everything after 7 would be out. I'm not sure about non alphanumeric
characters. I don't think that's a problem, but someone may know.
-- 
Dan Kriwitsky

 


_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com