segfault on disabled accounts
Bug #1435632 reported by
David Leonard
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| tacacs+ (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
When authenticating some users, tac_plus will check system passwords, and crash if the account is disabled.
To reproduce: set the system password (/etc/shadow) of a tac+ authenticated user to "!"; then try authenticating from a remote client (in my case with pam_tacplus); the tac_plus server will fault inside strcmp; first parameter passwd to strcmp is (NULL, ...) because crypt(,"!") returned NULL.
Patch attached.
Revision history for this message
| Ubuntu Foundations Team Bug Bot (crichton) wrote | #2 |
| tags: | added: patch |
Revision history for this message
| David Leonard (d+) wrote | #3 |
To post a comment you must log in.
The attachment "simple fix for disabled accounts" seems to be a patch. If it isn't, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you are a member of the ~ubuntu-reviewers, unsubscribe the team.
[This is an automated message performed by a Launchpad user owned by ~brian-murray, for any issues please contact him.]