Official Mumble VoIP Forums

Bug with phpBB authenticator

Ice/DBus, Web-Interfaces, Management tools

If someone enters a none-ASCII character in their password it causes the authenticator to crash:

Code: Select all

 WARNING dispatch exception: Util.cpp:169: Ice::UnknownException:
unknown exception:
Traceback (most recent call last):
  File "", line 293, in authenticate
    if phpbb_check_hash(pw, upw):
  File "", line 627, in phpbb_check_hash
    return _hash_crypt_private(password, hash, itoa64) == hash
  File "", line 608, in _hash_crypt_private
    hash = md5(salt + password).digest()
UnicodeDecodeError: 'ascii' codec can't decode byte 0xc3 in position 1: ordinal not in range(128)

identity: F84AFC7B-D416-42D8-8FBF-DBFBF268145F
operation: authenticate
Effectively causing a DoS attack as no-one can login to the server.

How can this be fixed?


Sorry. I cannot reproduce this issue on win7 or ubuntu 9.10. Can you please give additional information on your environment? Which operating system, python version, mysql version, python-ice version are you running this on?