Re: Expiry Field Broken on ftp and ssh

From: Mike Tancsa (mike@sentex.net)
Date: 06/20/01


Date: Wed, 20 Jun 2001 13:59:37 -0400
To: Robert <rna@reflectively.net>, freebsd-stable@FreeBSD.ORG
From: Mike Tancsa <mike@sentex.net>


There looks to be a PR about this from 1995, but I dont think its all
accurate as I dont see this problem on RELENG_3. Does anyone know off hand
where this got broken ? I am cc'ing the security as this is a security
issue no ?

         ---Mike

At 11:23 AM 6/20/01 -0400, Mike Tancsa wrote:

>Hmmm, it seems to be that way for some time now :-( A snapshot I have
>from May 21st is similarly hosed.
>
>For telnet, it works, however, ssh and ftp lets the account in unhindered.
>
> ---Mike
>
>
>
>At 11:13 AM 6/20/01 -0400, Robert wrote:
>>It seems as if the expiry field no longer "Expires" accounts.
>>
>>Does anyone know what has happened?
>>
>>
>>
>>To Unsubscribe: send mail to majordomo@FreeBSD.org
>>with "unsubscribe freebsd-stable" in the body of the message
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-stable" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: Privacy invaded, computer & internet dying, desperate, computer apocalypse.
    ... Home Computer Security ... Spyware and Hijackware Removal Specialists ... > Dont let the email adress put you off as well. ... > be endangering your security of your home computer. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Anyone know this ?
    ... CCNA CEH Security+ MCSE MCP+I ... 220-..:: Dont Hammer ... to facilitate one-on-one interaction with one of our expert instructors. ... Attend a course taught by an expert instructor with years of in-the-field ...
    (Pen-Test)
  • Re: I cant login to Sql no matter what i try! im ignorant and i need help :)
    ... I'd recommend taking a gander at that ASP.NET security best practices ... >sql) Mixed authentication. ... >>>adding the ASPNET account as a user in the database ... >>>i dont get it. ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: faking post data
    ... check with the bank first. ... If they dont mind, they could ... About security and phishing. ...
    (comp.lang.php)
  • EC-Counsil
    ... I dont really care about getting a certification, ... Ethical Hacking at the InfoSec Institute. ... with one of our expert instructors. ... learn to write exploits and attack security infrastructure. ...
    (Pen-Test)