Console login reports incorrect login after only entering username

Bug #139075 reported by Graviton on 2007-09-12
256
Affects Status Importance Assigned to Milestone
Ubuntu
High
Kees Cook
pam (Debian)
Fix Released
Unknown

Bug Description

Entering a non-existing username at the console, causes the console to report "Login incorrect" without first prompting for a password, and with no delay until a new login prompt is displayed.

This could make it easier to find available usernames on the system.

Related branches

Martin Pitt (pitti) wrote :

Confirmed on current gutsy. Kees, might this be a regression from PAM 0.99? Graviton, are you on Feisty or Gutsy?

Graviton (tim048) wrote :

Sorry 'bout that, gutsy.

Kees Cook (kees) wrote :

Thanks for the report. This has now been fixed with pam 0.99.7.1-4ubuntu3.

Changed in pam (Debian):
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public Security information  Edit
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.