vegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 天前Meet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comexternal-linkmessage-square101fedilinkarrow-up1408cross-posted to: linux@sh.itjust.workscybersecurity@infosec.publinux@lemmy.world
arrow-up1408external-linkMeet *sshole, the vulnerability that lets hackers SSH into Linux devicesarstechnica.comvegeta@lemmy.world to Technology@lemmy.worldEnglish · 2 天前message-square101fedilinkcross-posted to: linux@sh.itjust.workscybersecurity@infosec.publinux@lemmy.world
minus-squareAHemlocksLie@lemmy.ziplinkfedilinkEnglisharrow-up25·1 天前But passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.
But passwords need to be enabled for SSH. You must submit a faulty password of a specific kind, and the SSH server misinterprets it for passwordless accounts, which means the server must be configured to allow you to attempt a password.