RE: [cobalt-users] Security Issue?

["Andy Brown" <andy.brown@xxxxxxxxxxxxx>]

> I was wondering if anyone has seen this kind of madness on a 
> raq or other rh linux based system.  If I create the password 
> <12345!> for my admin user account and then try logging in 
> using, say, <12345> withouth the !, it lets me in no problem. 
>  I noticed this works for the shell and the gui, so it's not 
> some ssh glitch.  Does this have something to with the use of 
> <> in the password?
> 


An interesting point, did you set the password through the cobalt admin
or was it through the shell passwd command? As I suspect that the cobalt
admin might have been the reason for stripping the !

I've tested this out on my Slakware platform here, and it accepted (via
the terminal) the password:
<12345!>

And testing shows that if I try <12345> to log-in it FAILS, therefore it
is not stripping the exclamation mark out.
I'll dig out a redhat box and try the same to check more...


Andy
andy@xxxxxxxxxxxxxxxxxxxxx
http://ineedlinux.info/