Re: rssh security announcement
--qyHYMwAXsHLOQihY
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
On Tue, May 08, 2012 at 08:50:11PM -0400, Nico Kadel-Garcia wrote:
> Is it still a problem with OpenSSH version 6, which was
> recently published?
Yes. The flaw is in how rssh parses command lines, irrespective of
what SSH implementation is used. I've been a bit vague about the
details for the moment; I'm hoping that the announcement will generate
some interest in taking over the maintenance of the project. I'd like
to have some sense of what will happen next before the full details
are disclosed. If someone wants to step forward, it would be good to
give them a chance to fix it before that happens.
--
Derek D. Martin
http://www.pizzashack.org/
GPG Key ID: 0x81CFE75D
--qyHYMwAXsHLOQihY
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFPqqs6djdlQoHP510RArWyAJ40La8CwI2op77gjJwy4awk76qAPACfdD/4
3QDTfe8D6/Ivd+U0tHHuCZY=
=2vSr
-----END PGP SIGNATURE-----
--qyHYMwAXsHLOQihY--
討論串 (同標題文章)
完整討論串 (本文為第 3 之 9 篇)：