From owner-freebsd-security@FreeBSD.ORG  Mon Jun 18 15:27:28 2012
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 3D2061065670;
	Mon, 18 Jun 2012 15:27:28 +0000 (UTC)
	(envelope-from bah@bananmonarki.se)
Received: from feeder.usenet4all.se (1-1-1-38a.far.sth.bostream.se
	[82.182.32.53])
	by mx1.freebsd.org (Postfix) with ESMTP id 96D5C8FC0A;
	Mon, 18 Jun 2012 15:27:26 +0000 (UTC)
Received: from kw.news4all.se (c80-217-70-175.bredband.comhem.se
	[80.217.70.175])
	by feeder.usenet4all.se (8.13.1/8.13.1) with ESMTP id q5IFRJv6036577;
	Mon, 18 Jun 2012 17:27:19 +0200 (CEST)
	(envelope-from bah@bananmonarki.se)
Message-ID: <4FDF4879.9040509@bananmonarki.se>
Date: Mon, 18 Jun 2012 17:25:45 +0200
From: Bernt Hansson <bah@bananmonarki.se>
User-Agent: Mozilla/5.0 (X11; FreeBSD i386;
	rv:12.0) Gecko/20120607 Thunderbird/12.0.1
MIME-Version: 1.0
To: Budnev Vladimir <vladimir.budnev@gmail.com>
References: <4FDF2DCA.2020105@gmail.com>
	<CADLo838rMwrpZqBXRHG1Lc29EMB9vz2F8RvR9buSiQ-K_MJDOQ@mail.gmail.com>
	<4FDF3E1E.8040100@gmail.com>
In-Reply-To: <4FDF3E1E.8040100@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Mailman-Approved-At: Mon, 18 Jun 2012 17:08:31 +0000
Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org,
	Chris Rees <utisoft@gmail.com>
Subject: Re: (Free 7.2) "su -l" didnt prompt password.Is it possbile?
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: "Security issues \[members-only posting\]"
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 18 Jun 2012 15:27:28 -0000

On 2012-06-18 16:41, Budnev Vladimir wrote:

> The strange thing with possibly empty password is that login from
> ip-console accepted correct password. So dont sure about empty...It
> seems like su was accepting any password at that time.

That is the behavior with an empty password. The login would accept
any password.