Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: PuTTY private key passphrase stealing attack
From: Jan Schejbal <jan.mailinglisten () googlemail com>
Date: Thu, 03 Jun 2010 14:18:51 +0200

Am 02.06.2010 21:41, schrieb Joachim Schipper:
But note that someone with access to a single account could use this to
gain the password for that account, and hence possibly sudo access.

The attack, as suggested by me, is about passphrases for private keys 
that should never get transmitted to the server.



Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]