TigerVNC / tigervnc

High performance, multi-platform VNC client and server
https://tigervnc.org
GNU General Public License v2.0
5.09k stars 934 forks source link

'*' character in password #1758

Closed eu4you closed 4 months ago

eu4you commented 4 months ago

Hello. I launch vncserver 1.13.1+dfsg-2build2 installed by apt-get in ubuntu 22.04, vncserver :1 -localhost no -securitytypes vncauth

And '' character is in password, `phrase1phrase2`

Then, after the character '' are ignored. Any characters can accept by password, ex) phrase1 / phrase1*121314sdafd / phrase1**&(&^ .... etc.

This happenned not to limit specific vnc client(noVNC, tigervnc viewer, ultravnc viewer)

CendioOssman commented 4 months ago

How long are the phrases? Could this just be #370?

eu4you commented 4 months ago

My password is combined 8 characters containd 1 special character, 1 capital letter, 2 small letters, and 4 numbers, before character. And 4 characters contained 1 capital letter, and 3 special characters, after character. So totally 13 characters.

CendioOssman commented 4 months ago

That sounds exactly like #370. There are eight characters before *, so it's expected that it will ignore everything after that. Please see the other issue for future improvements to this.