[Bug 672328] Re: vsftpd: discloses whether usernames are valid or not

Mark Hobley 672328 at bugs.launchpad.net
Thu Mar 3 20:12:54 UTC 2011


"If a user tries to log in using a name in this file, they will be denied before they are asked for a password."
- Yeah, that is the problem. The user can now see that the username is not valid. We really need an option here to prompt for password before failing.

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vsftpd in ubuntu.
https://bugs.launchpad.net/bugs/672328

Title:
  vsftpd: discloses whether usernames are valid or not



More information about the Ubuntu-server-bugs mailing list