Re: [Full-Disclosure] SSH Exploit Request

From: Bryan Allen (bda_at_mirrorshades.net)
Date: 11/15/03

  • Next message: Pentest Security Advisories: "Re: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data" 
    To: full-disclosure@lists.netsys.com
Date: Sat, 15 Nov 2003 07:01:09 -0500

    On Nov 14, 2003, at 9:10 PM, Valdis.Kletnieks@vt.edu wrote:
    > You install a borked build of ssh (shared lib dependencies are FUN),
    > restart it, your session goes bye-bye, and you can't get back in to
    > fix the runaway sshd that's chewing all the resources....

    Restarting sshd does not kill running ssh sessions, as they're all
    forked and in memory. 

    --
bda
Cyberpunk is dead.  Long live cyberpunk.
http://mirrorshades.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
  • Next message: Pentest Security Advisories: "Re: [Full-Disclosure] Re: Serious flaws in bluetooth security lead to disclosure of personal data"

    Relevant Pages

    • RE: Users are randomly losing session and are forced to relogin
      ... I ran perfmon in our test environment (the problem occurs here too, win 2003, ... was kicked out after about an hour when our timeout setting is set to 4 ... a app restart issue that is causing the problem in inproc mode? ... I've seen plenty of cases where it's not Session ...
      (microsoft.public.dotnet.framework.aspnet)
    • Summary: 2 separate instances of ssh under same Sol10 service
      ... with each ssh service instance having its own method and ... I have not found a way to restart both instances in one command/argument ... How to get a restart initiated if _either_ daemon dies? ... however I would like to control and monitor them under the ...
      (SunManagers)
    • Re: [kde-linux] Sessions names
      ... ssh 192.168.2.80??? ... You can write a wrapper script that would start ssh to some ip and rename the ... konsole session dynamically. ... dcop call to konsole you need to know the pid of konsole. ...
      (KDE)
    • Re: Session State null at compile
      ... NullReferenceException at the line: foreach (Photo photo in ... I step through the code the Session variables get set and can then ... Flickr flickr; ... root, your application will restart. ...
      (microsoft.public.dotnet.framework.aspnet)
    • Re: How do I link a save ~$ file to the original document in Word?
      ... The ~$ file is the "owner" file that tells ... file working file but with the name: ... made during my session and each time I Save or it Auto Saves, ... file after the restart none of my changes during my last session were ...
      (microsoft.public.word.application.errors)