[FUG-BR] Falha de seguranca no SSH

[Giancarlo Rubio]

2008/9/1 mantunes <mantunes.listas em gmail.com>:
> Será que pode ser usado no FreeBSD ??


" [1] US-CERT is aware of active attacks against linux-based computing
infrastructures using compromised SSH keys. The attack appears to
initially use stolen SSH keys to gain access to a system, and then
uses local kernel exploits to gain root access. Once root access has
been obtained, a rootkit known as "phalanx2" is installed..."

A primeira falha é aquela mesma antiga que atingiu sistemas debian ,
onde o número de chaves geradas era limitada (piadinha [2]), a segunda
é uma falha de kernel que permite que usuários logados obtenham acesso
de root

[1]http://www.us-cert.gov/current/#ssh_key_based_attacks
[2]http://khq.org.ar/2008/05/15/debian-openssh-vulnerability/

>
> 2008/9/1 Diego <shaamangra em gmail.com>:
>> http://tecnologia.terra.com.br/interna/0,,OI3144845-EI4805,00.html
>>
>> --
>> Att.
>>
>> Diego Queiroz dos Santos
>>
>>
>>
>>
>> Powered by ....
>>
>> (__)
>> \\\'',)
>> \/ \ ^
>> .\._/_) FreeBSD
>> -------------------------
>> Histórico: http://www.fug.com.br/historico/html/freebsd/
>> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>>
>
>
>
> --
> Marcio Antunes
> Powered by FreeBSD
> ==================================
> * Windows: "Where do you want to go tomorrow?"
> * Linux: "Where do you want to go today?"
> * FreeBSD: "Are you, guys, comming or what?"
> -------------------------
> Histórico: http://www.fug.com.br/historico/html/freebsd/
> Sair da lista: https://www.fug.com.br/mailman/listinfo/freebsd
>



-- 
Giancarlo Rubio