[CLUE-Tech] SSH EXPLOIT

David Anselmi anselmi at americanisp.net
Wed Sep 17 07:49:13 MDT 2003


Warren wrote:
> I'm a little unclear about this exploit.  If you have root login
> disabled, are you still vulnerable?

The original subject is misleading.  It should say "SSH vulnerability", 
not exploit.  There are people on /. claiming that they have rooted 
their boxes, but no credible sources.

Since we don't know that there are any exploits it's hard to say what 
configurations are vulnerable.

I expect an exploit to come out soon, if one is possible.

Dave




More information about the clue-tech mailing list