News for hackers. Stuff that matters.

A comment on Got SSH? And we got exploit – OpenSSH xauth injection. Parent comment

Re:Got SSH? And we got exploit – OpenSSH xauth injection by vulnersTeam on Thursday March 17, 2016 @04:31AM (#11303169)
Quick-Info:

* requires: X11Forwarding yes

----> Mitigation - disable X11Forwarding?))

[ Parent | on HN ]
Re:Got SSH? And we got exploit – OpenSSH xauth injection by 77pt77 on Thursday March 17, 2016 @05:55PM (#11307948)
I actually think just disabling login is better.

People that set the shell to /bin/false or nologin are asking for trouble IMHO.

[ Parent | on HN ]
Re:Got SSH? And we got exploit – OpenSSH xauth injection by Piskvorrr on Thursday March 17, 2016 @04:49AM (#11303233)
Or even no-X11-forwarding for a specific (command-limited, else there's no point) key.
[ Parent | on HN ]