記事 en

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts

情報源: Slashdot · 追加日今日

A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes. "Apparently certain varieties of musl Linux (Alpine, OpenWrt, Buildroot, Yocto, etc.) have had this OpenSSH vulnerability for about a decade," writes longtime Slashdot reader AlteredEgg. "Upgrade now!" BleepingComputer reports: Security researcher Ozgun Kultekin, who discovered and released details on the vulnerability today, says the flaw has existed since 2016 and stems from how OpenSSH handles p

元のページを開くもっと発見する

よくある質問

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accountsとは？

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts is a 記事 discovery curated from Slashdot. A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password long

どのようにアクセスまたは体験できますか？

You can experience this content directly on its original host (Slashdot) by clicking the "Open Original" button.

このコンテンツの提供元は？

Curated from Slashdot by the OnSuggest team to surface the most interesting and serendipitous content on the web.

テクノロジーのすべてのコンテンツ →

記事 · テクノロジー

AI stocks suffer their biggest sell-off in months as data centre backlash reaches Washington

US stocks suffered their sharpest one-day decline in months on Thursday, November 5, as investors pulled back from the chipmakers, cloud providers and power companies that have driven much of this year’s market gains. The S&P 500 fell 4.4% to close at 7,353.73, its biggest single-day drop since the April 2025 “Liberation Day” tariff announcement, […] This story continues at The Next Web

The Next Web 詳細を見る →