Full Disclosure mailing list archives

Re: Ubuntu 11.10 now unsecure by default


From: Ryan Dewhurst <ryandewhurst () gmail com>
Date: Thu, 17 Nov 2011 19:34:35 +0000

Are there any other services this may effect?

On Thu, Nov 17, 2011 at 7:18 PM, Andrew N Dowden <
andrew_dowden () softdesign net nz> wrote:

 On 18/11/11 23:46, Larry W. Cashdollar wrote:

Anyone know what the default is for Ubuntu 11

PermitEmptyPasswords no
PasswordAuthentication no


in /etc/ssh/sshd_config?

 for Ubuntu 11.10 (Oneiric)

snip: ( from */etc/ssh/sshd_config* )
--
# To enable empty passwords, change to yes (NOT RECOMMENDED)
PermitEmptyPasswords no
--
# Change to no to disable tunnelled clear text passwords
#PasswordAuthentication yes
--

--
SoftDesign Group, Dowden Software Associates
P O Box 31 132, Lower Hutt 5040, NEW ZEALAND


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: