Re: [Full-disclosure] Ubuntu 11.10 now unsecure by default

[Ryan Dewhurst <ryandewhurst@xxxxxxxxx>]

Are there any other services this may effect?

On Thu, Nov 17, 2011 at 7:18 PM, Andrew N Dowden <
andrew_dowden@xxxxxxxxxxxxxxxxx> wrote:

>  On 18/11/11 23:46, Larry W. Cashdollar wrote:
>
> Anyone know what the default is for Ubuntu 11
>
> PermitEmptyPasswords no
> PasswordAuthentication no
>
>
> in /etc/ssh/sshd_config?
>
>  for Ubuntu 11.10 (Oneiric)
>
> snip: ( from */etc/ssh/sshd_config* )
> --
> # To enable empty passwords, change to yes (NOT RECOMMENDED)
> PermitEmptyPasswords no
> --
> # Change to no to disable tunnelled clear text passwords
> #PasswordAuthentication yes
> --
>
> --
> SoftDesign Group, Dowden Software Associates
> P O Box 31 132, Lower Hutt 5040, NEW ZEALAND
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/