4 ms·
Well the more likely reason for that is that the exploit doesn't work if you have the LANG env var set. The US is the primary place where it wouldn't be set and
by dralley 3y ago
Well the more likely reason for that is that the exploit doesn't work if you have the LANG env var set. The US is the primary place where it wouldn't be set and hence where the malware would be active.
- mmsc 3y agoDoes sshd normally run with any LANG env set when it’s run as a daemon?
- politelemon 3y agoDoes that mean setting a Lang environment variable is a mitigation?
- workfromspace 3y agoMy understanding was the opposite. Two examples I found where backdoor is working are: env -i LANG=en_US.UTF-8 /usr/sbin/sshd -D env -i LANG=C /usr/sbin/sshd -h