Full Disclosure mailing list archives

Remote root in LSH

From: Haggis <haggis () learningshophull co uk>
Date: Fri, 19 Sep 2003 12:57:30 +0000


After reading about a theoretical remote hole in OpenSSH and many detractors 
smugly saying that they weren't vulnerable because they run LSH (a free 
alternative), I'd like to present a working remote root exploit against LSH 
version 1.4.x.

Enjoy.

Attachment: lsh_exploit.c
Description:

Current thread:

Remote root in LSH Haggis (Sep 19)
- Re: Remote root in LSH Jeremiah Cornelius (Sep 19)
  - Re: Remote root in LSH Michael Renzmann (Sep 19)