From my quick reading on it, it's logins that allow passwords -- the bug is basically that hackers can send a specially crafted message, and be treated as though they are legitimate 'passwordless' accounts to login, essentially bypassing the password req.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments