Re: Isn't it a security hole...
On Wed, 14 Aug 1996, Gilbert Ramirez Jr. wrote:
> Actually, cracking a unix passwd file is quite easy, even for those
> with minimal computer knowledge. With widely available programs like Crack
> (UNIX), Crakerjack (DOS), and root_crack(DOS) anybody with a CPU >386 can
> crack the DES encryption with a bit of time.
Those programs you mention crack accounts file by guessing the actual
password, encrypting that with all the salts, and matching it to the
encrypted password. Guesses of the password include permutations of
the user name, gecos, and a dictionary. Unfortunately such attacks
often work.
Truly cracking a passwd file would take more than "a bit of time". Or
maybe you're an extremely patient person.
Guy
Reply to: