×
The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.
Regarding CVE-2023-38408 is is important to note that:
- Exploitation happens at the side of the connecting SSH client (not on
the SSH server!), assuming a compromised server
- The use of SSH agent forwarding (a requirement for exploitability) is
generally discouraged, and is disabled by default at client side (see
ssh_config(5))
- Exploitability is highly dependent on the library configuration and
platform properties (like the memory allocator and the dynamic linker)
of the target system (see writeup below)
I recommend reading the full vulnerability writeup about CVE-2023-38408
since it's quite beautiful:
https://www.openwall.com/lists/oss-security/2023/07/20/1
Regards,
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact
[javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.
midrange.com
