[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAHmME9pswFUdyDhJGXd7_1ESUV-ckxnVoUxVokUhtqgOwO6UNA@mail.gmail.com>
Date: Wed, 22 Jul 2015 11:41:57 +0200
From: "Jason A. Donenfeld" <Jason@...c4.com>
To: oss-security <oss-security@...ts.openwall.com>
Subject: Re: CVE Request for OpenSSH vulnerability -
authentication limits bypass
On Tue, Jul 21, 2015 at 11:16 AM, king cope
<isowarez.isowarez.isowarez@...glemail.com> wrote:
> even more for local attacks. Technically this vulnerability affects
> OpenSSH. It can be found with FreeBSD installations because these use
> the keyboard-interactive authentication
> mechanism (that is the one affected) in combination with pam.
IIRC, default Gentoo OpenSSH also ships with KeyboardInteractive + Pam.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
