3 ms·
Not sure what you're thinking about here, since the vulnerability is post-authentication? A bug like this could be pretty devastating for github and bitbucket
by 0x0 13y ago
Not sure what you're thinking about here, since the vulnerability is post-authentication?
A bug like this could be pretty devastating for github and bitbucket type setups where everyone in the world is using a shared, restricted "git" UNIX user authenticating with a private key, for git ssh push and pull.
- simgidacav 13y agoThis bug is problematic for all those situations where the ssh protocol is not used for telnet-style command line, but as a transport. e.g. Git uses ssh as transport protocol, but github (and similar platforms) don't support direct user login.
- johnchristopher 13y agoWhat about git-shell over ssh ?
- simgidacav 13y ago> What about git-shell over ssh ? I guess that gives the same problem. The exploitation allows to execute arbitrary code, as you would do by launching commands from, say, bash. I don't know git-shell, but I guess (from the manpage) it restricts the allowed commands. The exploitation of the bug would allow a malicious user to execute a command instead of git-shell. A good example of command could be /bin/bash.
- j_s 13y agoHopefully this clears it up for you: https://news.ycombinator.com/item?id=6696070 https://news.ycombinator.com/item?id=6696070