search for: iruserok

Hi, I have discovered a bug in the rhost module of Linux-PAM-0.57. This bug leads to a vulnerability in the remote login authentication, with the effect that ordinary user accounts may not be password protected. There is only one case when the bug causes a vulnerability: The problem case is when the user''s .rhost file has the name of a machine with *more than one IP address* as the

...: not found Checking for dgettext : not found Checking for gettext : not found Checking for iruserok : ok Checking for bswap16 : not found Checking for bswap32 : not found...

...: not found Checking for dgettext : not found Checking for gettext : not found Checking for iruserok : ok Checking for bswap16 : not found Checking for bswap32 : not found...

...ound Checking for macro getipnodebyaddr : not found Checking for freehostent : not found Checking for macro freehostent : not found Checking for iruserok : ok Checking for bswap16 : not found Checking for macro bswap16 : not found Checking for bswap32...

...es checking libintl.h presence... yes checking for libintl.h... yes checking for atexit... yes checking for cgetent... no checking for getprogname... no checking for setprogname... no checking for inet_aton... (cached) yes checking for gethostname... yes checking for getnameinfo... yes checking for iruserok... yes checking for putenv... yes checking for rcmd... yes checking for readv... yes checking for sendmsg... yes checking for setitimer... yes checking for socket... yes checking for strlwr... no checking for strncasecmp... yes checking for strptime... yes checking for strsep... yes checking for st...