Alpine Linux fixes OpenSSH password login bypass issue
Alpine Linux has patched an OpenSSH password authentication bypass that can let remote attackers log in to affected SSH servers without a password.
The issue affects non-PAM sshd setups with password authentication enabled, an account using a * password field, and another account with a $5$ or $6$ hash.
Administrators should update OpenSSH and restart sshd, or disable password authentication if they cannot update immediately.
- Linux Distro
- Free
- Open Source
Other apps mentioned in this article
Related news
External links
- Security advisory: openssh-server password authentication bypass Alpine Linux Posts • Official source
No comments so far, maybe you want to be first?
Gu