35-year-old vulnerability discovered in scp

Re:35-year-old vulnerability discovered in scp by jedberg on Tuesday January 15, 2019 @03:41AM (#18909683)

Unless I’m mistaken you’d still be safe. The vuln would only work if you were pulling files from an untrusted host, not pushing to it.

But if I wanted to share files with you, I’d just put them on the web, unless we already have a relationship where you can ssh somewhere that I have access to.

In which case I assume we’re trusted or you’ve at least verified the host key.

[ Parent | on HN ]

Re:35-year-old vulnerability discovered in scp by ATsch on Tuesday January 15, 2019 @04:02AM (#18909779)

Well, it's basically a privilege escalation vulnerability. If you've owned some server, you now have a possibility to get access to the admins local machine too, likely giving you admin access to the whole infrastructure.

If you "trust" any of these things is irrelevant, as that trust might be misplaced and the security model should keep you safe with compromised servers regardless.

[ Parent | on HN ]

Re:35-year-old vulnerability discovered in scp by Cpoll on Tuesday January 15, 2019 @05:26PM (#18916156)

It's the reverse, but it's almost the same. "Give me your key, and then take these files from my server."

I feel safe, because I think I'm going to cat a text file, not execute it.

[ Parent | on HN ]