Re: Attacks against SSH?

From: Skip Carter (skipat_private)
Date: Wed Dec 05 2001 - 15:31:55 PST

  • Next message: Ian Melven: "norton AV host discovery scan"

    > > bluebottle:~ >sh
    > > $ ssh -l`perl -e '{print "A"x90000}'`130.216.1.228
    > > Usage: ssh [options] host [command]
    > > Options:
    > >   -l user     Log in using this user name.
    > >   -n          Redirect input from /dev/null.
    > >   -A          Enable authentication agent forwarding.
    > >   -a          Disable authentication agent forwarding.
    > > 
    > > 
    > > Now we now get a usage error from the local ssh client.  Which ssh 
    > > client were you using Michal?
    > 
    >   With Openssh 2.9.9, the following works:
    > 
    >   ssh -v <hostname> perl -e '{print "A"x90000}'
    
       whoops, I misread the intent of the command line!
       The orignal command (with the '-l') is correct if a space is added before 
    the hostname/ip
    
    
    
       Never mind.
    
    -- 
     Dr. Everett (Skip) Carter      Phone: 831-641-0645 FAX:  831-641-0647
     Taygeta Scientific Inc.        INTERNET: skipat_private
     1340 Munras Ave., Suite 314    WWW: http://www.taygeta.com
     Monterey, CA. 93940            
    
    
    
    
    
    
    
    
    
    
    
    
    ----------------------------------------------------------------------------
    This list is provided by the SecurityFocus ARIS analyzer service.
    For more information on this free incident handling, management 
    and tracking system please see: http://aris.securityfocus.com
    



    This archive was generated by hypermail 2b30 : Thu Dec 06 2001 - 10:42:04 PST