Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

OpenSSH Reverse DNS Lookup Access Control Bypass Vulnerability

A vulnerability has been reported for OpenSSH that may allow unauthorized access to an OpenSSH server's login mechanism.

The vulnerability occurs because of the way OpenSSH restricts access. It's possible to configure OpenSSH to restrict access based on certain patterns. When a numeric IP address is provided as the host that is attempting a connection, an attacker can trick the OpenSSH server to allow access.







 

Privacy Statement
Copyright 2008, SecurityFocus