Console login reports incorrect login after only entering username

Bug #139075 reported by Graviton
Affects Status Importance Assigned to Milestone
Fix Released
Kees Cook
pam (Debian)
Fix Released

Bug Description

Entering a non-existing username at the console, causes the console to report "Login incorrect" without first prompting for a password, and with no delay until a new login prompt is displayed.

This could make it easier to find available usernames on the system.

Related branches

Revision history for this message
Martin Pitt (pitti) wrote :

Confirmed on current gutsy. Kees, might this be a regression from PAM 0.99? Graviton, are you on Feisty or Gutsy?

Revision history for this message
Graviton (tim048) wrote :

Sorry 'bout that, gutsy.

Revision history for this message
Kees Cook (kees) wrote :

Thanks for the report. This has now been fixed with pam

Changed in pam (Debian):
status: Unknown → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.