SSH Vulnerability?

Post by **ayu** » 18 Mar 2006, 18:52

i have been reading alot about SSH vulnerabilitys lately, but i never really got into what todo to use it.

i found something about "visible pasword" thingy.

http://www.securityfocus.com/bid/6168

is there someone that can explain the usage of such an exploit?

Post by **CommonStray** » 19 Mar 2006, 12:01

http://www-arc.com/sara/cve/SSH_vulnerabilities.html

Post by **bad_brain** » 19 Mar 2006, 12:45

neo130, the one you linked is a local exploit (well,more a bug), you need to have terminal-access anyway to use it, it's just about getting the login-data of other users....

SSH is surely exploitable, but as far as I know it´s pretty hard compared to other services....

FrankB · Post by **FrankB** » 30 Mar 2006, 15:22

bad_brain wrote:(..) SSH is surely exploitable, but as far as I know it´s pretty hard compared to other services....

I f*cking hope it is damn hard compared to other rlogin things !! You should know that by know (PM)

)

--FrankB
n00b of other n00bs.