Debian: New openssh packages fix predictable randomness


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Debian: New openssh packages fix predictable randomness
# 1  
Old 05-14-2008
Debian: New openssh packages fix predictable randomness

LinuxSecurity.com: Jan Pechanec discovered that ssh fails back to creating a trusted X11 cookie if creating an untrusted cookie fails, potentially exposing the local display to a malicious remote server when using X11 forwarding.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
SSH-ASKPASS-FULLSCREEN(1)				      General Commands Manual					 SSH-ASKPASS-FULLSCREEN(1)

NAME
ssh-askpass-fullscreen - A simple replacement for ssh-askpass written with gtk2 SYNOPSIS
ssh-askpass-fullscreen DESCRIPTION
This manual page was written for the Debian distribution because the original program does not have a manual page. gnome-ssh-askpass is a GNOME-based passphrase dialog for use with OpenSSH. It is intended to be called by the ssh-add(1) program and not invoked directly. It allows ssh-add(1) to obtain a passphrase from a user, even if not connected to a terminal (assuming that an X display is available). This happens auto-matically in the case where ssh-add is invoked from one's ~/.xsession or as one of the GNOME startup pro- grams, for example. In order to be called automatically by ssh-add, ssh-askpass-fullscreen should be installed as /usr/bin/ssh-askpass ssh-askpass-fullscreen is a program that... ENVIRONMENT VARIABLES
The following environment variables are recognized: GNOME_SSH_ASKPASS_GRAB_SERVER Causes gnome-ssh-askpass to grab the X server before asking for a passphrase. GNOME_SSH_ASKPASS_GRAB_POINTER Causes gnome-ssh-askpass to grab the mouse pointer will be grabbed too. These may have some benefit to security if you don't trust your X server. Keyboard is always grabbed. SEE ALSO ssh-add(1), ssh-askpass(1). AUTHOR
This manual page was written by Marco Presi (Zufus) <zufus@debian.org>, for the Debian GNU/Linux system (but may be used by others) and it is based on that for x11-ssh-askpass by Philip Hands and the one for gnome-ssh-askpass by Colin Watson <cjwatson@debian.org> May 8 , 2004 SSH-ASKPASS-FULLSCREEN(1)