Fixed pass-the-hash vulnerability
This commit is contained in:
parent
f9bf041b50
commit
09a901b104
|
@ -2057,11 +2057,17 @@ passwordgood (char *cpw)
|
|||
crypted = crypt (cpw, cpw);
|
||||
if (crypted == NULL)
|
||||
return 0;
|
||||
|
||||
#ifdef USE_SQLITE3
|
||||
if (!strncmp (crypted, me->password, DGL_PASSWDLEN))
|
||||
return 1;
|
||||
|
||||
#else
|
||||
if (!strncmp (cpw, me->password, DGL_PASSWDLEN))
|
||||
return 1;
|
||||
|
||||
#endif
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue