security leak in ppp.log file

1999-07-03 Thread Carel Fellinger
Hai, thanks for all the (email-) replies, it's fixed now. As one told me it is indeed a flaw in older versions of pppd, dealt with in later versions with an extra flag 'hide-password'. To circumvent it with older versions you simply have to edit /etc/ppp/peers/provider and comment the 'debug' opt

Re: security leak in ppp.log file

1999-07-02 Thread Mark Brown
On Thu, Jul 01, 1999 at 10:51:22PM +0400, Konstantin Kivi wrote: [pppd logging user/pasword details] > its also annoying as I like to > send all syslogd output to tty12 Remove or comment out the debug line from your /etc/ppp/peeers/ file. -- Mark Brown mailto:[EMAIL PROTECTED] (Trying to av

Re: security leak in ppp.log file

1999-07-02 Thread Konstantin Kivi
On Thu, Jul 01, 1999 at 01:54:59PM +0200, Carel Fellinger wrote: > > Jun 27 13:30:46 vvs pppd[16671]: rcvd [LCP ConfAck id=0x2 > ] > Jun 27 13:30:46 vvs pppd[16671]: rcvd [LCP ConfReq id=0x28 0x682cc4e0> ] > Jun 27 13:30:

Re: security leak in ppp.log file

1999-07-01 Thread John Hasler
> and there they are, so what did I do wrong? Nothing. A bug in pppd causes it to put the password in the log when using PAP even if you put a '\q' in front of it. Later versions of pppd fix this by adding the 'hide-password' option. Edit /etc/ppp/peers/provider and delete the 'debug' option. -

Re: security leak in ppp.log file

1999-07-01 Thread Jens B. Jorgensen
These log messages show up because somewhere you've specified the 'debug' option. Just get rid of this option. Carel Fellinger wrote: > > Sorry for reposting this question, but somehow my posts to the newsgroup > never make

security leak in ppp.log file

1999-07-01 Thread Carel Fellinger
Sorry for reposting this question, but somehow my posts to the newsgroup never make it to the list and many posting of others seam to miss too:(, so please reply by email too. thanks ---