Possibly linux@lemmy.zip to Linux@lemmy.mlEnglish · 2 年前XZ backdoor in a nutshelllemmy.zipimagemessage-square27fedilinkarrow-up110arrow-down10
arrow-up110arrow-down1imageXZ backdoor in a nutshelllemmy.zipPossibly linux@lemmy.zip to Linux@lemmy.mlEnglish · 2 年前message-square27fedilink
minus-squared3Xt3r@lemmy.nzMlinkfedilinkarrow-up1·2 年前This is informative, but unfortunately it doesn’t explain how the actual payload works - how does it compromise SSH exactly?
minus-squareAatube@kbin.melroy.orglinkfedilinkarrow-up0·2 年前It allows a patched SSH client to bypass SSH authentication and gain access to a compromised computer
minus-squared3Xt3r@lemmy.nzMlinkfedilinkarrow-up1·edit-22 年前From what I’ve heard so far, it’s NOT an authentication bypass, but a gated remote code execution. There’s some discussion on that here: https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b But it would be nice to have a similar digram like OP’s to understand how exactly it does the RCE and implements the SSH backdoor. If we understand how, maybe we can take measures to prevent similar exploits in the future.
This is informative, but unfortunately it doesn’t explain how the actual payload works - how does it compromise SSH exactly?
It allows a patched SSH client to bypass SSH authentication and gain access to a compromised computer
From what I’ve heard so far, it’s NOT an authentication bypass, but a gated remote code execution.
There’s some discussion on that here: https://bsky.app/profile/filippo.abyssdomain.expert/post/3kowjkx2njy2b
But it would be nice to have a similar digram like OP’s to understand how exactly it does the RCE and implements the SSH backdoor. If we understand how, maybe we can take measures to prevent similar exploits in the future.