From owner-freebsd-security  Tue Dec  2 06:42:55 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id GAA04098
          for security-outgoing; Tue, 2 Dec 1997 06:42:55 -0800 (PST)
          (envelope-from owner-freebsd-security)
Received: from lohi.clinet.fi (root@lohi.clinet.fi [194.100.0.7])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id GAA04046
          for <security@FreeBSD.ORG>; Tue, 2 Dec 1997 06:41:39 -0800 (PST)
          (envelope-from Petri.Riihikallio@Metis.fi)
Received: from [194.100.45.1] ([194.100.45.1])
	by lohi.clinet.fi (8.8.7/8.8.6) with ESMTP id QAA02570
	for <security@FreeBSD.ORG>; Tue, 2 Dec 1997 16:41:46 +0200 (EET)
X-Sender: metis@pop.clinet.fi
Message-Id: <l03130301b0a9ce618ec7@[194.100.45.1]>
In-Reply-To: <199712021222.EAA26303@hub.freebsd.org>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Tue, 2 Dec 1997 16:46:23 +0200
To: security@FreeBSD.ORG
From: Petri Riihikallio <Petri.Riihikallio@Metis.fi>
Subject: Re: Possible problem with ftpd 6.00
Sender: owner-freebsd-security@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Simon Shapiro <shimon@simon-shapiro.org> wrote:

>if ( strncmp(login, "ftp, MAX_LOGIN) &&
>     strncmp(login "anonymous", MAX_LOGIN) ) {
>  printf("Password; ")
>} else {
>  printf("Your E-Mail Address, please ");
>}

If you make this kind of change you will break all the graphical clients
which expect "Password:".

The prompt should be "Use E-Mail Address as Password:".

$0.02
Petri

--
Petri.Riihikallio@Metis.fi