Re: tlug: Wrong password worked!

[Scott Stone <sstone@example.com>]

On Tue, 22 Dec 1998, Darren Cook wrote:

> I was just logging in via telnet, and after typing my password I hit
> another key instead of enter. Oh well, backspace just makes matters worse,
> so I press enter anyway.
> 
> And it works.
> 
> Just to be sure I logged in again, deliberately adding an extra letter to
> the end of the password.
> 
> Why does this work? Shorter passwords, or replacing the last letter of the
> password all fail, so I don't suppose this is a security problem.

It ignores all but the first 8 characters.

--------------------------------------------------
Scott M. Stone <sstone@example.com>
Head of TurboLinux English / Systems Administrator
Pacific HiTech, Inc. (http://www.turbolinux.com)


-------------------------------------------------------------------
Next Nomikai: 14 January 1999, 19:30 Tengu TokyoEkiMae 03-3275-3691
*** it will will be Jan 14 (Thu), as Jan 15 (Fri) is a natl holiday
Next Technical Meeting: 13 February, 12:30               Place: TBD
-------------------------------------------------------------------
more info: http://tlug.linux.or.jp                     Sponsor: PHT