A Serious Security Flaw Found in LibSSH
A serious security flaw has been found in the LibSSH library that allowed hackers to directly log into a server without ever using a password.
What is SSH?
SSH stands for Secure Shell which is a remote protocol which helps to manage computers remotely. Also many applications use SSH to perform remote commands on a running server. The main purpose of SSH is to establishe a secure channel (Tunnel) between the client and the remote server.
What software implementations use LibSSH?
One widely used software implementation that uses LibSSH is cURL which is shipped with every Mac and also included in every Linux distribution, it is widely used for automating updates and downloads on IoT devices. Although cURL is not included in servers to process incoming connections and uses LibSSH2 which is not affected by the vulnerability.
Is there a silver lining?
Yes there is, and a big one at that, fortunately the biggest market share of SSH products are OpenSSH and LibSSH2 which are both unaffected, consequently the attack surface for SSH products is greatly reduced.
See the following video for a full explanation
[/embedyt]
Posted from my blog with SteemPress : https://latesthackingnews.com/2018/10/19/a-serious-security-flaw-found-in-libssh/
Posted from my blog with SteemPress : https://latesthackingnews.com/2018/10/19/a-serious-security-flaw-found-in-libssh/
Congratulations @twr! You have completed the following achievement on the Steem blockchain and have been rewarded with new badge(s) :
Click on the badge to view your Board of Honor.
If you no longer want to receive notifications, reply to this comment with the word
STOPDo not miss the last post from @steemitboard: