OpenSSH Password

Open zsnell02 opened this issue 4 years ago • 2 comments

When you change the root password via iSecureOS, it has a bug where you can append an unlimited amount of exclamation marks to the end of the password and it still works. For example, if my password is "Password" the following passwords will work when I try to SSH:

Password Password! Password!! Password!!!

and so on

I don't know why or how serious this is, but it does not happen when running passwd in the terminal.

Jun 07 '21 15:06 zsnell02

I am investigating this. Was not able to reproduce the bug on my test devices.

Jun 08 '21 19:06 GeoSn0w

Ok, I tested it 4+ times on mine and it still does the same thing.

Jun 08 '21 19:06 zsnell02