× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.


  1.  Home
  2. MIDRANGE-L
  3. September 2023

Re: OpenSSH Vulnerability

Hello,

Am 08.09.2023 um 09:26 schrieb Bálint Varga-Perke via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

Regarding CVE-2023-38408 is is important to note that:

- Exploitation happens at the side of the connecting SSH client (not on the SSH server!), assuming a compromised server

- The use of SSH agent forwarding (a requirement for exploitability) is generally discouraged, and is disabled by default at client side (see ssh_config(5))

- Exploitability is highly dependent on the library configuration and platform properties (like the memory allocator and the dynamic linker) of the target system (see writeup below)

- Problem seems to be related to ssh-agent, a helper application to help with password protected keys being copied to RAM without a password. I wonder if people in the Midrange world are aware of that nifty helper?

:wq! PoC




As an Amazon Associate we earn from qualifying purchases.

This thread ...
Replies:
Follow On AppleNews
Return to Archive home page | Return to MIDRANGE.COM home page

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.