SSHole: A Long Password Opens Alpine Accounts Without Authentication

A password between 257 and 1,024 bytes long can open an account over SSH that should not accept passwords. The…

read more

OpenSSH 10.6p2 closes access with passwords up to 1,024 bytes long

A password string between 257 and 1,024 bytes was enough to log in over SSH to certain Linux accounts configured…

read more