News for hackers. Stuff that matters.

A comment on RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems. Parent comment

Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by mmsc on Monday July 01, 2024 @12:14PM (#40847233)
>www-data should be set to noshell 99% of the time.

Huh? execve(2), of course, lets to execute arbitrary files. No need to spawn a tty at all. https://swisskyrepo.github.io/InternalAllTheThings/cheatshee...

>This is all that would be relevant, and this is also very rare.

Huh? Exploiting an unpatched vulnerability on a server to get access to a user account is.. very rare? That's exactly what lateral movement is about.

[ Parent | on HN ]
Re:RegreSSHion: RCE in OpenSSH's server, on glibc-based Linu... by DEADMINCE on Monday July 01, 2024 @12:35PM (#40847470)
Instead of taking the time to reply 'huh' multiple times, you should make sure you read what you're replying to.

For example:

> Huh? Exploiting an unpatched vulnerability on a server to get access to a user account is.. very rare?

The 'this' I refer to is very clearly not what you've decided to map it to here. The 'this' I refer to, if you follow the comment chain, refers to a subset of something you said which was relevant to your point - the rest was not.

[ Parent | on HN ]