[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers

To: full-disclosure@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
From: "bodik@xxxxxxxxxx" <bodik@xxxxxxxxxx>
Date: Wed, 30 Sep 2009 00:03:51 +0200

> All standard users have read access to /var/log/auth, so if root

they shouldn't, at least on my default debian they don't ...

b

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Follow-Ups:
- Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
  - From: maxigas
- Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
  - From: jfch

References:
- [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
  - From: my.hndl
- Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
  - From: Kurth Bemis
- Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
  - From: my.hndl

Prev by Date: Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
Next by Date: Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
Previous by thread: Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
Next by thread: Re: [Full-disclosure] Modifying SSH to Capture Login Credentials from Attackers
Index(es):
- Date
- Thread