News for hackers. Stuff that matters.

A comment on Trivial authentication bypass in libssh leaves servers wide open.

Re:Trivial authentication bypass in libssh leaves servers wi... by writepub on Wednesday October 17, 2018 @06:53PM (#18244520)
Is this a code error or a protocol error? If a protocol relies on a message from the client side to allow access, it's a protocol error!

It's unlikely that ssh - a protocol that powers large swaths of software, has such an error, but always good to hear from the experts that this is indeed a coding error.

[ Parent | on HN ]
Re:Trivial authentication bypass in libssh leaves servers wi... by dbt00 on Wednesday October 17, 2018 @07:40PM (#18244774)
It's an incorrect implementation of the protocol, yes. That message should only be sent from the server to the client, and the server should not take any action (besides dropping the connection) when it's received.
[ Parent | on HN ]