[ale] FW: Revised OpenSSH Security Advisory
Christopher Fowler
cfowler at outpostsentinel.com
Wed Jun 26 16:49:37 EDT 2002
getpwnam(3) is your friend. Modify that and you can auth against
anything. Even a person typing at a terminal allowing people in.
On Wed, 2002-06-26 at 16:41, James P. Kinney III wrote:
> And I thought I was being slick authenticating against an NFS shared
> Microsoft SQL-Server v.7 running on a Win98 box. :)
>
> On Wed, 2002-06-26 at 16:41, Christopher Fowler wrote:
> > You want to get wet! My SSH auths out of MySQL! HA!!!!!!!! And
> > Radius!!! And Shared Memory!!!! not /etc/passwd. /etc/passwd sucks!
> >
> > On Wed, 2002-06-26 at 16:24, Jonathan Rickman wrote:
> > > On 26 Jun 2002, Christopher Fowler wrote:
> > >
> > > > Okay let me elaborate. I made changes to the source I'm running.
> > > > Luckily I placed my name at the changes so I have to add them again :(
> > >
> > > You stud!!! I'd guess you could probably look at the change log and run a
> > > diff on the old code if you were inclined to patch it in a studly fashion.
> > >
> > > --
> > > Jonathan Rickman
> > > X Corps Security
> > > http://www.xcorps.net
> > >
> > >
> > >
> >
> >
> >
> > ---
> > This message has been sent through the ALE general discussion list.
> > See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
> > sent to listmaster at ale dot org.
> --
> James P. Kinney III \Changing the mobile computing world/
> President and CEO \ one Linux user /
> Local Net Solutions,LLC \ at a time. /
> 770-493-8244 \.___________________________./
>
> GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
> <jkinney at localnetsolutions.com>
> Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
>
>
>
>
>
---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be
sent to listmaster at ale dot org.
More information about the Ale
mailing list