News for hackers. Stuff that matters.
Re:Trivial authentication bypass in libssh leaves servers wi... by dbt00 on Wednesday October 17, 2018 @07:40PM (#18244774)
It's an incorrect implementation of the protocol, yes. That message should only be sent from the server to the client, and the server should not take any action (besides dropping the connection) when it's received.

There are no comments on this comment yet.