full-disclosure - Re: I find a bug

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <AANLkTim_ibO6+hnqHt-5RV99qjr4yTzQjP=zYZPx75mX@mail.gmail.com>
Date: Wed, 19 Jan 2011 05:16:43 -0600
From: Laurelai Storm <laurelai@...echan.org>
To: Georgi Guninski <guninski@...inski.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: I find a bug

Yeah but you know damn well what he meant, and thats my point smartass.

On Wed, Jan 19, 2011 at 5:11 AM, Georgi Guninski <guninski@...inski.com>wrote:

> on vanilla ubuntu 10.04 your command doesn't ask for the ROOT password, it
> asks for the password of the luser running "sudo".
>
> On Wed, Jan 19, 2011 at 04:45:50AM -0600, Laurelai Storm wrote:
> > try sudo su - root
> >
> > On Wed, Jan 19, 2011 at 4:21 AM, Georgi Guninski <guninski@...inski.com
> >wrote:
> >
> > > can you give a reproducible testcase to try (i am confused by "user:
> > > root")?
> > >
> > > On Wed, Jan 19, 2011 at 10:33:14AM +0100, Christian Sciberras wrote:
> > > > FYI I got asked for the root password (user: root, pass: *whatever*).
> > > > I don't expect you to know my machine better than I do.
> > > >
> > > > On Wed, Jan 19, 2011 at 10:16 AM, Georgi Guninski <
> guninski@...inski.com
> > > >wrote:
> > > >
> > > > > On Tue, Jan 18, 2011 at 04:43:31PM +0100, Christian Sciberras
> wrote:
> > > > > > Oh, and for what it's worth, I get asked for the root password on
> my
> > > > > machine
> > > > > > (vanilla ubuntu).
> > > > > >
> > > > > FYI vanilla ubuntu doesn't set a root password (try to log in as
> root).
> > > > > i don't expect you to know advanced stuff like this.
> > > > >
> > >
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/