Hacker Newsnew | past | comments | ask | show | jobs light | darkhn

> Finally, if sshd cannot be updated or recompiled, this signal handler race condition can be fixed by simply setting LoginGraceTime to 0 in the configuration file. This makes sshd vulnerable to a denial of service (the exhaustion of all MaxStartups connections), but it makes it safe from the remote code execution presented in this advisory.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact |

Search: