[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] PuTTY private key passphrase stealing attack
- To: full-disclosure@xxxxxxxxxxxxxxxxx
- Subject: Re: [Full-disclosure] PuTTY private key passphrase stealing attack
- From: Jan Schejbal <jan.mailinglisten@xxxxxxxxxxxxxx>
- Date: Thu, 03 Jun 2010 14:18:51 +0200
Am 02.06.2010 21:41, schrieb Joachim Schipper:
> But note that someone with access to a single account could use this to
> gain the password for that account, and hence possibly sudo access.
The attack, as suggested by me, is about passphrases for private keys
that should never get transmitted to the server.
Gruß
Jan
--
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/