| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Thu, 17 Nov 2011 14:42:27 -0500 (EST) From: "Larry W. Cashdollar" <bugs@....dhs.org> To: "Ryan Dewhurst" <ryandewhurst@...il.com> Cc: full-disclosure@...ts.grok.org.uk Subject: Re: Ubuntu 11.10 now unsecure by default imap? creating folders? etc.. =/ > Are there any other services this may effect? > > On Thu, Nov 17, 2011 at 7:18 PM, Andrew N Dowden < > andrew_dowden@...tdesign.net.nz> wrote: > >> On 18/11/11 23:46, Larry W. Cashdollar wrote: >> >> Anyone know what the default is for Ubuntu 11 >> >> PermitEmptyPasswords no >> PasswordAuthentication no >> >> >> in /etc/ssh/sshd_config? >> >> for Ubuntu 11.10 (Oneiric) >> >> snip: ( from */etc/ssh/sshd_config* ) >> -- >> # To enable empty passwords, change to yes (NOT RECOMMENDED) >> PermitEmptyPasswords no >> -- >> # Change to no to disable tunnelled clear text passwords >> #PasswordAuthentication yes >> -- >> >> -- >> SoftDesign Group, Dowden Software Associates >> P O Box 31 132, Lower Hutt 5040, NEW ZEALAND >> >> >> _______________________________________________ >> Full-Disclosure - We believe in it. >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html >> Hosted and sponsored by Secunia - http://secunia.com/ >> > _______________________________________________ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ -- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Powered by blists - more mailing lists