OpenSSH Forwarded SSH-Agent Remote Code Execution : vimarsan

Qualys Security AdvisoryCVE-2023-38408: Remote Code Execution in OpenSSH's forwarded ssh-agent========================================================================Contents========================================================================SummaryBackgroundExperimentsResultsDiscussionAcknowledgmentsTimeline========================================================================Summary========================================================================"ssh-agent is a program to hold private keys used for public keyauthentication. Through use of environment variables the agent canbe located and automatically used for authentication when logging into other machines using ssh(1). . Connections to ssh-agent may beforwarded from further remote hosts using the -A