Bug 189811 - Unlock screen with invalid password.
Unlock screen with invalid password.
Product: Fedora
Classification: Fedora
Component: gnome-screensaver (Show other bugs)
All Linux
medium Severity high
: ---
: ---
Assigned To: Ray Strode [halfline]
Depends On:
  Show dependency treegraph
Reported: 2006-04-24 16:17 EDT by Michael Havas
Modified: 2007-11-30 17:11 EST (History)
1 user (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2006-04-25 08:42:37 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Michael Havas 2006-04-24 16:17:57 EDT
Description of problem:
It is possible to unlock the screen with an invalid password if passwords are
the same length and the invalid password is identical to the password except for
the last character.

Version-Release number of selected component (if applicable):
gnome-screensaver 2.14.1

How reproducible:
Unlock screen with invalid password described in description.

Steps to Reproduce:
1. Lock screen.
2. Press ctrl.
3. Enter invalid password described in description.
4. Press return.
Actual results:
Unlock screen.

Expected results:
Invalid password error.

Additional info:
The user is found in NIS.
Comment 1 Michael Havas 2006-04-24 16:34:54 EDT
NIS doesn't allow for passwords greater than 8 characters. I am using NIS. My
password is 9 characters. Silly me.
Comment 2 petrosyan 2006-04-25 01:11:26 EDT
change the status of this bug as RESOLVED

Note You need to log in before you can comment on or make changes to this bug.