OpenSSH Forwarded SSH-Agent Remote Code Execution

Qualys Security AdvisoryCVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent========================================================================Contents========================================================================SummaryBackgroundExperimentsResultsDiscussionAcknowledgmentsTimeline========================================================================Summary========================================================================"ssh-agent is a program to hold private keys used for public keyauthentication. Through use of environment variables the agent canbe located and automatically used for authentication when logging into other machines using ssh(1). ... Connections to ssh-agent may beforwarded from further remote hosts using the -A

Related Keywords

,Tavis Ormandy ,Jann Horn ,Damien Miller ,Assignment Team ,Qualys Security ,Remote Code Execution ,Ubuntu Desktop ,Local Privilege Escalation ,Remote Code ,