Bug#385035: [Pkg-shadow-devel] Bug#385035: Login should not allow text to be entered between user and password

[Christian Perrier]

Quoting Matthew Flaschen (matthew.flaschen at gatech.edu):
> Package: login
> Version: 4.0.3-31sarge8
> 
> The problem is that after you type the username, but before the program 
> begins taking password input, it is possible to type directly into the 
> shell.  This means that if someone begins typing their password 
> prematurely will have it displayed on screen, and logged.


I absolutely can't reproduce this with login 4.0.18.1-2, ie the
version in unstable (and soon testing).


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-shadow-devel/attachments/20060828/95d8c12f/attachment.pgp