Article en

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts

Source: Slashdot · Ajouté Aujourd’hui

A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes. "Apparently certain varieties of musl Linux (Alpine, OpenWrt, Buildroot, Yocto, etc.) have had this OpenSSH vulnerability for about a decade," writes longtime Slashdot reader AlteredEgg. "Upgrade now!" BleepingComputer reports: Security researcher Ozgun Kultekin, who discovered and released details on the vulnerability today, says the flaw has existed since 2016 and stems from how OpenSSH handles p

Ouvrir l'original Découvrir plus

Foire aux questions

Qu'est-ce que OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts ?

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts is a article discovery curated from Slashdot. A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password long

Comment puis-je y accéder ou l'essayer ?

You can experience this content directly on its original host (Slashdot) by clicking the "Open Original" button.

D'où vient ce contenu ?

Curated from Slashdot by the OnSuggest team to surface the most interesting and serendipitous content on the web.

Toutes les découvertes Technologie →

Article · Technologie

AI stocks suffer their biggest sell-off in months as data centre backlash reaches Washington

US stocks suffered their sharpest one-day decline in months on Thursday, November 5, as investors pulled back from the chipmakers, cloud providers and power companies that have driven much of this year’s market gains. The S&P 500 fell 4.4% to close at 7,353.73, its biggest single-day drop since the April 2025 “Liberation Day” tariff announcement, […] This story continues at The Next Web

The Next Web Voir les détails →