GNOME Bugzilla – Bug 425273
Incorrect password managment
Last modified: 2007-04-02 06:35:17 UTC
X-Mailer: bug-buddy 2.14.0 Subject: Incorrect password handling Distribution: Debian 4.0 Package: vino Severity: major Version: GNOME2.14.3 unspecified Gnome-Distributor: Debian Synopsis: Incorrect password managment Bugzilla-Product: vino Bugzilla-Component: Server Bugzilla-Version: unspecified Description: Description of Problem: Despite the fact that the passwords don't match i still login. Steps to reproduce the problem: 1. use a vnc client to connect to a vino server which has the session password set to <password> (replace <password> with anything) . example the password is : letmein 2. enter <password>+(something) . example : letmein1 Actual Results: I login despite the fact that the password was not correct Expected Results: I should be denied access How often does this happen? every time Additional Information: ------- Bug created by bug-buddy at 2007-04-01 21:12 -------
The RFB protocol only cares about the first 7 characters of the password *** This bug has been marked as a duplicate of 155560 ***