FreeBSD Bugzilla – Attachment 15986 Details for
Bug 29487
ftpd leaks password typed as username by mistake
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
file.diff
file.diff (text/plain), 767 bytes, created by
Yoshihiro Koya
on 2001-08-06 14:50:01 UTC
(
hide
)
Description:
file.diff
Filename:
MIME Type:
Creator:
Yoshihiro Koya
Created:
2001-08-06 14:50:01 UTC
Size:
767 bytes
patch
obsolete
>Index: ftpd.c >=================================================================== >RCS file: /home/ncvs/src/libexec/ftpd/ftpd.c,v >retrieving revision 1.62.2.10 >diff -u -r1.62.2.10 ftpd.c >--- ftpd.c 2001/07/19 05:44:08 1.62.2.10 >+++ ftpd.c 2001/08/06 13:34:11 >@@ -1228,9 +1228,15 @@ > if (rval) { > reply(530, "Login incorrect."); > if (logging) >- syslog(LOG_NOTICE, >- "FTP LOGIN FAILED FROM %s, %s", >- remotehost, curname); >+ if (getpwnam(curname)){ >+ syslog(LOG_NOTICE, >+ "FTP LOGIN FAILED FROM %s, %s", >+ remotehost, curname); >+ } else { >+ syslog(LOG_NOTICE, >+ "FTP LOGIN FAILED FROM %s, (unknown user)", >+ remotehost); >+ } > pw = NULL; > if (login_attempts++ >= 5) { > syslog(LOG_NOTICE,
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=15986">View the attachment on a separate page</a>.</b>
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 29487
: 15986