[scponly] post authentication openSSH vulnerability

wbr oblyr joe at sublimation.org
Fri Nov 8 14:39:28 EST 2013


I haven't investigated this vulnerability in openssh yet, but it seems to
directly impact the viability of restricted shells such as rssh and scponly.

http://www.openssh.com/txt/gcmrekey.adv

I recommend that folks investigate their openssh version and configuration,
Joe
-------------- next part --------------
HTML attachment scrubbed and removed


More information about the scponly mailing list