News for hackers. Stuff that matters.

A comment on The surprising persistence of RSA keys in SSH.

Re:The surprising persistence of RSA keys in SSH by ryanlol on Friday May 29, 2020 @08:28PM (#23357264)
FWIW the .ssh/authorized_keys command= restriction for sftp doesn’t prevent arbitrary command execution if your system is configured with procfs.

https://seclists.org/fulldisclosure/2014/Oct/35

[ Parent | on HN ]
Re:The surprising persistence of RSA keys in SSH by theamk on Friday May 29, 2020 @09:15PM (#23357542)
> OpenSSH 6.7 contains a mitigation,

> OpenSSH 6.7 was released on 2014-10-06.

I am not sure why this matters? If you have not updated your system for 8 years, I am sure you have worse problems than restricted account privilege escalation.

[ Parent | on HN ]