[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nessus
Subject:    Re: Problem on starting the attack
From:       Sebastian Schreiber <Sebastian.Schreiber () gmx ! net>
Date:       1998-12-17 23:16:33
[Download RAW message or body]

Philippe BOUVIER <Philippe.Bouvier@i3s.unice.fr> wrote:
[...]
> to quit completly the client and start it again. Then I can log on.
> 
> here is the log on the Windows client
> 
> < NTP/1.0 >
> 
> User : Password : 
> Bad login attempt !

I guess the problem you are describing has s.th. to do with the
missing "carrige returns". Here is a patch that Jochen Wiedmann wrote.

I needed to install the patch in order to talk with nessusd via
telnet.

Ranaud, could you apply the patch to the WIP version? Thanks!

Best Regards, Sebastian




*** nessus-981016/src/nessusd/auth.c.orig	Mon Sep 28 15:57:55 1998
--- nessus-981016/src/nessusd/auth.c	Wed Dec 16 14:11:05 1998
***************
*** 48,53 ****
--- 48,54 ----
    char * buf_user, * buf_password;
    char * permissions;
    struct users * usersdb = arg_get_value(globals, "users");
+   int l;
     
    buf_user = emalloc(255);
    buf_password = emalloc(255);
***************
*** 58,65 ****
    auth_printf(globals, "Password : ");
    auth_gets(globals, buf_password, 254);
    
!   buf_user[strlen(buf_user)-1]=0;
!   buf_password[strlen(buf_password)-1]=0;
    
    if((permissions = check_user(usersdb, buf_user, buf_password)))
    {
--- 59,78 ----
    auth_printf(globals, "Password : ");
    auth_gets(globals, buf_password, 254);
    
!   l = strlen(buf_user);
!   if (l  &&  buf_user[l-1] == '\n') {
!       buf_user[--l] = '\0';
!   }
!   if (l  &&  buf_user[l-1] == '\r') {
!       buf_user[--l] = '\0';
!   }
!   l = strlen(buf_password);
!   if (l  &&  buf_password[l-1] == '\n') {
!       buf_password[--l] = '\0';
!   }
!   if (l  &&  buf_password[l-1] == '\r') {
!       buf_password[--l] = '\0';
!   }
    
    if((permissions = check_user(usersdb, buf_user, buf_password)))
    {

[prev in list] [next in list] [prev in thread] [next in thread]