i386/67240: adduser concatenates the password

[GS]

>Number:         67240
>Category:       i386
>Synopsis:       adduser concatenates the password
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    freebsd-i386
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Wed May 26 16:40:29 PDT 2004
>Closed-Date:
>Last-Modified:
>Originator:     GS
>Release:        4.9
>Organization:
>Environment:
4.9-RELEASE FreeBSD 4.9-RELEASE #0: Mon Oct 27 17:51:09 GMT 2003     root at freebsd-stable.sentex.ca:/usr/obj/usr/src/sys/GENERIC  i386

>Description:
      the password the user puts into adduser is concatenated
>How-To-Repeat:
      adduser - put the person's password, so say username goiden, password is goidenpassword.  you can log in as goiden password goidenpass or goidenpassw or goidenpasswo or goidenpassword.  It seems that only "goidenpass" is stored
>Fix:
      to fix the user has to passwd to change their password.  If they change it to goidenpassword, it takes correctly.
>Release-Note:
>Audit-Trail:
>Unformatted: