password insecurity

[Da M. Kadre]

Does anyone have any ideas?
I have changed users passwords with ./vpasswd and you can still login with
tho old password, new password , and any string that begins with the
password plus additional characters.


Thanks,
Da M. Kadre