[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#741678: It is possible to use live user account to log in via SSH

Package: live-config
Version: 4.0~alpha31-1
Severity: important
Tags: security

By default, live-config creates a user with known name (user) and password (live). In live images with included openssh-server, this means that anyone can log into a live system immediately once it connects to a network (which it tries to do during boot).

Reply to: