8 ms·
FWIW the .ssh/authorized_keys command= restriction for sftp doesn’t prevent arbitrary command execution if your system is configured with procfs. https://secli
by ryanlol 6y ago
FWIW the .ssh/authorized_keys command= restriction for sftp doesn’t prevent arbitrary command execution if your system is configured with procfs.
https://seclists.org/fulldisclosure/2014/Oct/35 https://seclists.org/fulldisclosure/2014/Oct/35
- theamk 6y ago> OpenSSH 6.7 contains a mitigation, > OpenSSH 6.7 was released on 2014-10-06. I am not sure why this matters? If you have not updated your system for 8 years, I am sure you have worse problems than restricted account privilege escalation.