[ale] FW: Revised OpenSSH Security Advisory

Christopher Fowler cfowler at outpostsentinel.com
Wed Jun 26 16:49:37 EDT 2002


getpwnam(3) is your friend.  Modify that and you can auth against
anything.  Even a person typing at a terminal allowing people in.


On Wed, 2002-06-26 at 16:41, James P. Kinney III wrote:
> And I thought I was being slick authenticating against an NFS shared
> Microsoft SQL-Server v.7 running on a Win98 box.  :)
> 
> On Wed, 2002-06-26 at 16:41, Christopher Fowler wrote:
> > You want to get wet!  My SSH auths out of MySQL!  HA!!!!!!!!  And
> > Radius!!! And Shared Memory!!!!  not /etc/passwd.  /etc/passwd sucks!
> > 
> > On Wed, 2002-06-26 at 16:24, Jonathan Rickman wrote:
> > > On 26 Jun 2002, Christopher Fowler wrote:
> > > 
> > > > Okay let me elaborate.  I made changes to the source I'm running.
> > > > Luckily I placed my name at the changes so I have to add them again :(
> > > 
> > > You stud!!! I'd guess you could probably look at the change log and run a
> > > diff on the old code if you were inclined to patch it in a studly fashion.
> > > 
> > > -- 
> > > Jonathan Rickman
> > > X Corps Security
> > > http://www.xcorps.net
> > > 
> > > 
> > > 
> > 
> > 
> > 
> > ---
> > This message has been sent through the ALE general discussion list.
> > See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
> > sent to listmaster at ale dot org.
> -- 
> James P. Kinney III   \Changing the mobile computing world/
> President and CEO      \          one Linux user         /
> Local Net Solutions,LLC \           at a time.          /
> 770-493-8244             \.___________________________./
> 
> GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
> <jkinney at localnetsolutions.com>
> Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7 
> 
> 
> 
> 
> 



---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.






More information about the Ale mailing list