Well, this thread didn't quite go like I had planned. ;-) I did have someone contact me off-list and say that he had a vulnerable sshd server that was owned - he wasn't certain that it was this exploit, but he thought it was (not sure why - he didn't say). I'm working on getting the trace for analysis - will post if I get it (and it's OK w/ the source). So it seems to me (ranting aside), that it MIGHT be exploitable, and there MIGHT be code out there to do it, but my issue remains: until I see source, or poc I won't know for sure. Does anyone who knows for sure feel like contributing? -- aka Dolph Longhorn attica@stackheap.org GPG Key ID: 0xF8F859D0 http://pgp.mit.edu:11371/pks/lookup?search=0xF8F859D0&op=index "There is no such thing as right and wrong, there's just popular opinion." -Jeffrey Goines
Attachment:
pgp00087.pgp
Description: PGP signature