Google Search: inurl:pap-secrets -cvs
l0om rates this entry 10 out of 10.
Submitted: 2004-11-06 07:52:11
Added by: l0om
linux vpns store there usernames and passwords for PAP authentification in a file called “pap-secrets” where the usernames and the passwords are in cleartext.
2004-11-07 05:56:05 (stilte): The password file should have been readable only by root, not by us.
2005-03-04 03:11:43 (lazydog):
2005-08-24 12:45:52 (userdan): “The password file should have been readable only by root, not by us.”
We wouldn’t be here unless we wanted root…