Full Disclosure mailing list archives
Re: OpenSSH again
From: pdt () jackhammer org
Date: Tue, 23 Sep 2003 17:12:38 -0500 (CDT)
FWIW: A co-worker just forwarded information on to me that a "non-default" configuration such as oh.... PAM is exploitable by being able to login as any user with no password. It affects the portable tree versions 3.7p1 and 3.7.1p1. Has anybody seen exploit code on this one?
Check out the webpage : ....-P2 :( Another bug :(( _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- OpenSSH again Dumitru Stama (Sep 23)
- Re: OpenSSH again pdt (Sep 23)
- Re: OpenSSH again - not really. Kurt Seifried (Sep 23)
- Re: OpenSSH again - not really. security snot (Sep 24)
- ** OFFTOPIC ** OpenSSH again - not really. Kurt Seifried (Sep 24)
- Re: OpenSSH again - not really. Kurt Seifried (Sep 23)
- Re: OpenSSH again pdt (Sep 23)