Re: openssh exploit code?

["S . f . Stover" <attica () stackheap org>]

Well, this thread didn't quite go like I had planned.  ;-)

I did have someone
contact me off-list and say that he had a vulnerable sshd server that was
owned - he wasn't certain that it was this exploit, but he thought it was (not
sure why - he didn't say).  I'm working on getting the trace for analysis -
will post if I get it (and it's OK w/ the source).

So it seems to me (ranting aside), that it MIGHT be exploitable, and there
MIGHT be code out there to do it, but my issue remains:  until I see source,
or poc I won't know for sure.

Does anyone who knows for sure feel like contributing?



-- 

aka Dolph Longhorn
attica () stackheap org
GPG Key ID: 0xF8F859D0
http://pgp.mit.edu:11371/pks/lookup?search=0xF8F859D0&op=index

"There is no such thing as right and wrong, there's just popular opinion."
-Jeffrey Goines

Attachment: _bin
Description: