7 char passwords in WinVNC

Tristan Richardson tjr "at" orl.co.uk
Thu, 05 Mar 1998 13:41:36 +0000


> > It's a bug.  It should be limited to eight characters, to remain
> > compatible with the Unix getpassword routines.  This bug is fixed in
> > Release 8 of WinVNC and above.
> 
> Unix getpass() on most platforms isnt limited to 8, nor are passwords.
> 

... but it is on Solaris 2.5:

% man getpass

...

DESCRIPTION
     getpass() reads up  to  a  newline  or  EOF  from  the  file
     /dev/tty,  after prompting on the standard error output with
     the null-terminated string prompt and disabling echoing.   A
     pointer is returned to a null-terminated string of at most 8
     characters.
...


Cheers

Tristan

+--------------------------------------------------------------------+
|  Tristan Richardson                 Email:  tjr "at" orl.co.uk          |
|  ORL                                  Tel:  +44 1223 343000        |
|  24a Trumpington Street               Fax:  +44 1223 313542        |
|  Cambridge, CB2 1QA, UK               WWW:  http://www.orl.co.uk/  |
+--------------------------------------------------------------------+
|          ORL - The Olivetti & Oracle Research Laboratory           |
+--------------------------------------------------------------------+