看板FB_security
标 题Re: Attacks on ssh port
发信站NCTU CSIE FreeBSD Server (Thu Sep 23 16:19:34 2004)
转信站ptt!FreeBSD.csie.NCTU!not-for-mail
On Thu, Sep 23, 2004 at 10:09:22AM +0200, Dag-Erling Smorgrav wrote:
> Nick Cleaton <[email protected]> writes:
> > I want access to my system from any IP address, so I've patched my
> > sshd so that a secret token is required to connect.
[...]
> Look up "replay attack" on google...
Indeed, this doesn't keep out attackers who can sniff a valid session,
just like tcp_wrappers doesn't keep out attackers who can spoof an
authorized source address.
Nick
--
$_='YN8KuE***
http://www.exonetric.com/ Telehouse UK colo ***HARQr**'
..'NfzV0YrC1*** GBP40/month +VAT 40G BW no setup fee ***MnjJ**'
..'6QvtcPgQ20*** ***nlS**'
;s/(.)(.*(.))/$2.chr(32+(ord($1)+ord$3)%89)/euntil/Foo/;eval#****'
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"